PCCET · Question #103
A user can get on the payroll app to see a paycheck, but can't modify it. This example describes which principle?
The correct answer is C. least privilege. The principle of least privilege dictates that users should only have the minimum necessary access rights to perform their job functions.
Question
A user can get on the payroll app to see a paycheck, but can't modify it. This example describes which principle?
Options
- Aseparation of duties
- Bauditability
- Cleast privilege
- Ddefense in depth
How the community answered
(27 responses)- B7% (2)
- C89% (24)
- D4% (1)
Why each option
The principle of least privilege dictates that users should only have the minimum necessary access rights to perform their job functions.
Separation of duties involves dividing critical tasks among multiple individuals to prevent a single person from completing a malicious act alone.
Auditability refers to the ability to track and review actions performed within a system for accountability and compliance.
Least privilege ensures that the user can view their paycheck (necessary access) but cannot modify it (preventing unauthorized actions), thereby minimizing potential harm from accidental or malicious activity. This aligns with the security best practice of granting only the permissions essential to perform a task.
Defense in depth employs multiple layers of security controls to protect resources and data.
Concept tested: Principle of least privilege
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility-for-application-development#what-is-the-principle-of-least-privilege
Topics
Community Discussion
No community discussion yet for this question.