CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What does the principle of least privilege state?
- A.B. Users should have full administrative access for efficiency
- B.A. Users should have the minimum access necessary to perform their job functions
- C.C. All users should share the same access level
- D.D. Access should be granted permanently once approved
Why B is correct
The principle of least privilege states that users, processes, and systems should only have the minimum permissions necessary to perform their required tasks. This limits damage from accidents, errors, and security breaches. Access should be reviewed regularly and revoked when no longer needed.
Know someone studying for Security Fundamentals? Send them this one.