Which security principle is violated by running all processes as root or administrator?

Question

Options

• Aprinciple of least privilege
• Brole-based access control
• Cseparation of duties
• Dtrusted computing base

• A
  93% (43)
• B
  2% (1)
• C
  4% (2)

Explanation

Principle of Least Privilege holds that every process, user, or system component should operate with only the minimum permissions necessary to perform its function. Running all processes as root/administrator grants maximum privileges to everything, directly violating this principle - if any process is compromised, an attacker gains full system control.

Why the distractors are wrong:

• B (Role-based access control): RBAC is a method of assigning permissions based on job roles - it's an access control model, not the principle being violated here.
• C (Separation of duties): This principle requires that critical tasks be divided among multiple people to prevent fraud - it's about human accountability, not process privilege levels.
• D (Trusted computing base): The TCB refers to the hardware/software components critical to enforcing security policy - it's a component concept, not a privilege principle.

Memory tip: Think of "least privilege" like a keycard system - a janitor shouldn't have a key to every room in the building, just the ones they need. Running everything as root gives every process the master key, which is exactly what least privilege is designed to prevent.

No community discussion yet for this question.