nerdexam
(ISC)2

SSCP · Question #1271

_____________ states that users should only be given enough access to accomplish their jobs.

The correct answer is C. Concept of Least Privilege. The Concept of Least Privilege is a security principle requiring users to be granted only the minimum necessary access to perform their job functions.

Submitted by haru.x· Apr 18, 2026Access Controls

Question

_____________ states that users should only be given enough access to accomplish their jobs.

Options

  • ASeparation of Duties
  • BDue Diligence
  • CConcept of Least Privilege
  • DAll of the listed items are correct

How the community answered

(19 responses)
  • A
    5% (1)
  • C
    89% (17)
  • D
    5% (1)

Why each option

The Concept of Least Privilege is a security principle requiring users to be granted only the minimum necessary access to perform their job functions.

ASeparation of Duties

Separation of Duties is a principle where no single individual has complete control over a critical process, requiring multiple people to complete a task, which is different from granting minimal access.

BDue Diligence

Due Diligence refers to the ongoing effort to identify risks and maintain a standard of care to protect an organization's assets, which is a broader organizational responsibility, not a specific access control principle.

CConcept of Least PrivilegeCorrect

The Concept of Least Privilege is a fundamental security principle ensuring that users, processes, and systems have only the minimum necessary access rights or permissions to complete their legitimate tasks. This reduces the attack surface and potential damage from unauthorized actions or security breaches.

DAll of the listed items are correct

Since only option C accurately describes the concept, the statement 'All of the listed items are correct' is false.

Concept tested: Security principles, Least Privilege

Source: https://learn.microsoft.com/en-us/security/zero-trust/govern/least-privilege

Topics

#Least Privilege#Access Control#Security Principles#User Permissions

Community Discussion

No community discussion yet for this question.

Full SSCP Practice