CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What is the principle of least privilege?
- A.Users should only be granted the minimum level of access needed to perform their job
- B.Administrators should have access to all systems at all times, and least privilege means granting each account full administrative rights
- C.Privileges should be assigned based on seniority
- D.Users should share accounts to reduce the number of credentials, because least privilege applies to human users but never to service accounts
Why A is correct
The principle of least privilege states that users, programs, and systems should only have the minimum permissions necessary to perform their required tasks. This limits the damage that can result from accidents, errors, or unauthorized use of an account.
Know someone studying for Security Fundamentals? Send them this one.