Default permit is only a good approach in an environment where:

A.
security threats are non-existent or negligible.

B.
security threats are non-negligible.

C.
security threats are serious and severe.

D.
users are trained.

E.
None of the choices.

Explanation:

“Everything not explicitly permitted is forbidden (default deny) improves security at a cost in
functionality. This is a good approach if you have lots of security threats. On the other hand.,
“”Everything not explicitly forbidden is
permitted”” (default permit) allows greater functionality by sacrificing security. This is only a good
approach in an environment where security threats are non- existent or negligible.”