Which of the following is the BEST way to reduce the likelihood of an individual performing a potentially harmful action as the result of unnecessary entitlement?

Application monitoring detects harmful actions after they occur or are attempted, rather than preventing them due to unnecessary entitlement.

Separation of duty prevents a single individual from controlling an entire critical process, but does not directly address unnecessary entitlements for individual tasks.

The principle of least privilege dictates that users, programs, and processes should be granted only the minimum necessary privileges to perform their legitimate functions. By restricting access to only essential resources, the potential for an individual to perform harmful actions, whether malicious or accidental, due to excessive permissions is significantly reduced.

Nonrepudiation ensures that an action cannot be denied by the perpetrator, but it does not prevent the action from happening in the first place due to excessive privileges.