What is the principle of least privilege?
- A.Users should share accounts to reduce the number of credentials
- B.Privileges should be assigned based on seniority
- C.Administrators should have access to all systems at all times
- D.Users should only be granted the minimum level of access needed to perform their job
Why D is correct
The principle of least privilege states that users, programs, and systems should only have the minimum permissions necessary to perform their required tasks. This limits the damage that can result from accidents, errors, or unauthorized use of an account.
Know someone studying for Security Fundamentals? Send them this one.