200-201 · Question #395
Which of these is a defense-in-depth strategy principle?
The correct answer is B. Provide the minimum permissions needed to perform job functions.. This principle is known as the Principle of Least Privilege, which is a core element of defense-in- depth strategies. It ensures users have only the access necessary to perform their tasks, limiting potential damage from compromised accounts or insider threats. Defense-in-depth i
Question
Which of these is a defense-in-depth strategy principle?
Options
- AIdentify the minimum resource required per employee.
- BProvide the minimum permissions needed to perform job functions.
- CDisable administrative accounts to avoid unauthorized changes.
- DAssign the least network privileges to segment network permissions.
How the community answered
(70 responses)- A1% (1)
- B93% (65)
- C4% (3)
- D1% (1)
Explanation
This principle is known as the Principle of Least Privilege, which is a core element of defense-in- depth strategies. It ensures users have only the access necessary to perform their tasks, limiting potential damage from compromised accounts or insider threats. Defense-in-depth involves multiple layers of security controls, including administrative controls like policies enforcing least privilege, to reduce vulnerabilities and contain threats.
Topics
Community Discussion
No community discussion yet for this question.