CLOUD-DIGITAL-LEADER · Question #427
An organization wants to ensure that they grant users only the permissions they require to perform their job responsibilities. Which security principle describes this approach?
The correct answer is C. Least privilege. The Least Privilege principle states that users, systems, and processes should be granted only the minimum permissions necessary to perform their specific job functions-nothing more. This limits the potential damage from accidents, misuse, or compromised accounts. Cyber…
Question
An organization wants to ensure that they grant users only the permissions they require to perform their job responsibilities. Which security principle describes this approach?
Options
- ACyber resilience
- BZero-trust
- CLeast privilege
- DSecurity by default
How the community answered
(47 responses)- A2% (1)
- B4% (2)
- C87% (41)
- D6% (3)
Explanation
The Least Privilege principle states that users, systems, and processes should be granted only the minimum permissions necessary to perform their specific job functions-nothing more. This limits the potential damage from accidents, misuse, or compromised accounts. Cyber resilience refers to an organization's ability to recover from attacks. Zero-trust is a broader security model that assumes no user or system is trusted by default. Security by default means systems ship in their most secure configuration out of the box.
Topics
Community Discussion
No community discussion yet for this question.