Which of the following is an example of the principle of least privilege and is the MOST secure when granting access to a shared network drive used by the Accounting department?

Granting appropriate (not full) permissions to only Accounting department users at both the share and NTFS levels correctly implements least privilege - non-Accounting users receive no access, Accounting users receive only what their role requires, and enforcing both permission layers provides defense in depth through dual-layer access control.

Granting all users full control violates least privilege by giving every user on the network unrestricted access to a department-specific resource.

Granting the Accounting department full control at the share level is excessive and violates least privilege, as full control unnecessarily permits users to change permissions and delete any file.

Using explicit NTFS deny rules for all other users creates administrative risk - deny entries override allow permissions and can inadvertently block administrators, whereas properly scoped allow permissions for Accounting alone achieves the same result more safely.