Question

What does "The Principle of Least Privilege" mean as applied to security?

A. Access to sensitive data should be granted only to executives in the company.

B. Permanent access to an organization’s most critical assets should be limited to the current administrator.

C. Each user should have only the absolute minimum permissions necessary to complete their current responsibilities.

D. Users who were recently hired within an organization should hold the lowest levels of user permissions.

Answer 1

Correct option is (C) Each user should have only the absolute minimum permissions necessary to complete their current responsibilities.

Explanation: The principle of least privilege (PoLP) refers to an information security concept in which a user is given the minimum levels of access or permissions needed to perform his/her job functions. Least privilege enforcement ensures the non-human tool has the requisite.