220-802 · Question #103
Which of the following security controls would be an example of the least privilege principle on a home PC?
The correct answer is B. Create a standard user account for kids. Creating a standard (non-administrator) account for kids grants only the minimum permissions needed for daily use, which is the definition of the least privilege principle.
Question
Which of the following security controls would be an example of the least privilege principle on a home PC?
Options
- AInstall antispyware on the PC.
- BCreate a standard user account for kids.
- CStore all financial data in a separate folder.
- DDisable the firewall for online gaming.
How the community answered
(43 responses)- A7% (3)
- B86% (37)
- C5% (2)
- D2% (1)
Why each option
Creating a standard (non-administrator) account for kids grants only the minimum permissions needed for daily use, which is the definition of the least privilege principle.
Installing antispyware is a malware protection measure, not a privilege restriction - it does not limit what a user account is permitted to do.
The principle of least privilege requires that users receive only the access rights necessary to perform their intended tasks. A standard user account restricts the ability to install software, change system settings, or access other users' files, limiting the potential damage from misuse or compromise to only what that limited account can affect.
Storing financial data in a separate folder is a data organization practice and does not itself restrict user privileges or access rights.
Disabling the firewall actively reduces system security and grants broader network access, which is the opposite of least privilege.
Concept tested: Least privilege principle via standard user accounts
Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/access-control
Topics
Community Discussion
No community discussion yet for this question.