Which security principle describes the practice of giving users the minimum rights to access the resources necessary to do their jobs?

The correct answer is B. least privilege. Least privilege (B) is the correct answer because it is the established security term for granting users only the minimum permissions required to perform their job functions - no more, no less. This principle limits the damage that can occur from accidents, errors, or…

Cybersecurity Fundamentals

Question

Which security principle describes the practice of giving users the minimum rights to access the resources necessary to do their jobs?

Options

Aknown privilege
Bleast privilege
Cuser privilege
Dlowest privilege

How the community answered

(54 responses)

A
4% (2)
B
94% (51)
C
2% (1)

Explanation

Least privilege (B) is the correct answer because it is the established security term for granting users only the minimum permissions required to perform their job functions - no more, no less. This principle limits the damage that can occur from accidents, errors, or compromised accounts by reducing the attack surface.

A (known privilege) is not a real security principle - it sounds plausible but is fabricated.
C (user privilege) describes a general concept (permissions a user has) rather than the policy of minimizing those permissions.
D (lowest privilege) is a tempting near-miss, but the correct term in security literature is specifically "least," not "lowest."

Memory tip: Think of it as the "least" you'd give a new intern - only what they need to do their task, nothing extra. The phrase "least privilege" appears verbatim in virtually every security framework (NIST, ISO 27001, Zero Trust), so if you see "least," that's your answer.

Topics

#Least Privilege#Access Control#Security Principles#Privilege Management

Community Discussion

No community discussion yet for this question.

Full PCCSA Practice