Which security principle states that a user should only have the necessary permission to execute a task?

The correct answer is C. Least Privilege. The principle of Defense in Depth refers to using multiple layers of security. The principle of Least Privilege states that subjects should be given only those privileges required to complete their specific tasks (ISC2 Study Guide Chapter 1, Module 3). Separation of Duties…

Security Principles

Question

Options

APrivileged Accounts
BSeparation of Duties
CLeast Privilege
DDefense in Depth

How the community answered

(20 responses)

A
10% (2)
B
5% (1)
C
85% (17)

Explanation

The principle of Defense in Depth refers to using multiple layers of security. The principle of Least Privilege states that subjects should be given only those privileges required to complete their specific tasks (ISC2 Study Guide Chapter 1, Module 3). Separation of Duties states that no user should ever be given enough privileges to misuse the system. Finally, Privileged Accounts are accounts with permissions beyond those of regular users, such as manager and administrator

Topics

#Security Principles#Least Privilege#Access Control#Information Security Governance

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice