Which of the following is an example of the principle of least privilege?

Question

Options

• AUsers can only access the assets they need for their role and nothing more
• BUsers have the privilege to control who can access their information
• CUsers can access all items but can only modify the ones they need
• DUsers have unrestricted access to all information

• A
  89% (16)
• B
  6% (1)
• C
  6% (1)

Explanation

The principle of least privilege states that users, systems, and processes should only have the minimum level of access rights necessary to perform their job functions - nothing more. Option A correctly describes this: users access only the assets required for their specific role. Option B describes user-controlled access (discretionary access), not least privilege. Option C describes a scenario where users have broad read access with limited write access - this is broader than least privilege, which restricts both read and write access to only what is needed. Option D (unrestricted access) is the direct opposite of least privilege.

No community discussion yet for this question.