What is the principle of least privilege (PoLP) applied to network share permissions, and what specific misconfiguration commonly violates it?

• A.PoLP: grant only the minimum permissions required to perform a job function. Common violation: assigning 'Domain Users' or 'Everyone' Full Control on network shares, giving all users read/write/delete access to folders containing sensitive data. Correct: assign specific security groups with read-only or read/write permissions based on job role, with no broader access
• B.PoLP requires all users to use temporary passwords that expire every 24 hours for network share access
• C.PoLP in network shares means all shares must use encrypted SFTP instead of SMB to prevent eavesdropping
• D.PoLP is only applicable to system administrator accounts; regular user accounts are exempt from privilege restrictions