A new company policy states that all end-user access to network resources will be controlled based on the users' roles and responsibilities within the organization. Which of the following security…

The correct answer is B. Least privilege. Least privilege is the security principle that users should be granted only the minimum level of access necessary to perform their job functions - no more. Tying access to a user's specific role and responsibilities directly implements this principle, as it prevents…

Networking

Question

A new company policy states that all end-user access to network resources will be controlled based on the users' roles and responsibilities within the organization. Which of the following security concepts has the company just enabled?

Options

ACertificates
BLeast privilege
CDirectory permissions
DBlacklists

How the community answered

(48 responses)

A
6% (3)
B
90% (43)
C
2% (1)
D
2% (1)

Explanation

Least privilege is the security principle that users should be granted only the minimum level of access necessary to perform their job functions - no more. Tying access to a user's specific role and responsibilities directly implements this principle, as it prevents over-permissioning and limits the blast radius of a compromised account. While this also describes Role-Based Access Control (RBAC), that option is not listed. Among the available choices, least privilege is the concept most directly represented. Certificates relate to authentication/encryption, directory permissions are a technical mechanism, and blacklists are a deny-list control - none describe the governing principle of role-based access.

Topics

#least privilege#RBAC#access control#security policy

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice