Which of the following is a best practice for network security?

The correct answer is B. Enforcing least privilege. Enforcing least privilege means granting users, systems, and processes only the minimum access rights needed to perform their functions. This limits the blast radius of a compromised account or system. The other options are anti-patterns: default passwords (A) are widely known…

Access Controls Concepts

Question

Options

AUsing default passwords
BEnforcing least privilege
CDisabling all logging
DAllowing all traffic through the firewall

How the community answered

(43 responses)

A
2% (1)
B
88% (38)
C
7% (3)
D
2% (1)

Explanation

Enforcing least privilege means granting users, systems, and processes only the minimum access rights needed to perform their functions. This limits the blast radius of a compromised account or system. The other options are anti-patterns: default passwords (A) are widely known and easily exploited, disabling logging (C) removes the audit trail needed for detection and forensics, and allowing all firewall traffic (D) defeats the entire purpose of having a firewall.

Topics

#Network Security#Least Privilege#Access Control#Best Practices

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice