210-250 · Question #130
which security principle is violated by running all processes as root/admin
The correct answer is B. Principle of least privilege. The Principle of Least Privilege states that every process, user, or system component should operate using the minimum level of access rights necessary to perform its function. Running all processes as root or administrator grants full system privileges to every process…
Question
which security principle is violated by running all processes as root/admin
Options
- ARBAC
- BPrinciple of least privilege
- CSegregation of duty
How the community answered
(27 responses)- A7% (2)
- B89% (24)
- C4% (1)
Explanation
The Principle of Least Privilege states that every process, user, or system component should operate using the minimum level of access rights necessary to perform its function. Running all processes as root or administrator grants full system privileges to every process, meaning a vulnerability in any one of them could give an attacker complete control over the system. RBAC (A) is Role-Based Access Control, a method for assigning permissions based on roles, which is a mechanism to enforce least privilege but is not the principle being violated here. Segregation of Duty (C) is about dividing tasks among multiple people to prevent fraud or error, which is a different concept.
Topics
Community Discussion
No community discussion yet for this question.