nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #518

Which is one PRIMARY benefit of having the least privilege principle?

The correct answer is B. To minimize the risk of unauthorized access to sensitive data. The principle of least privilege (PoLP) states that users, systems, and processes should only have the minimum level of access necessary to perform their job functions. The primary security benefit is minimizing the risk of unauthorized access to sensitive data - if an account…

Access Controls Concepts

Question

Which is one PRIMARY benefit of having the least privilege principle?

Options

  • ATo simplify the process of user account creation
  • BTo minimize the risk of unauthorized access to sensitive data
  • CTo reduce the number of users accounts in the system
  • DTo simplify the process of giving privilege to an account

How the community answered

(35 responses)
  • B
    94% (33)
  • C
    3% (1)
  • D
    3% (1)

Explanation

The principle of least privilege (PoLP) states that users, systems, and processes should only have the minimum level of access necessary to perform their job functions. The primary security benefit is minimizing the risk of unauthorized access to sensitive data - if an account is compromised or misused, the attacker can only access what that account was permitted to see. It does not simplify account creation, reduce account numbers, or make privilege assignment easier; in fact, it often makes those tasks more granular and complex.

Topics

#Least Privilege#Access Control#Security Principles#Risk Mitigation

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice