SSCP · Question #1271
_____________ states that users should only be given enough access to accomplish their jobs.
The correct answer is C. Concept of Least Privilege. The Concept of Least Privilege is a security principle requiring users to be granted only the minimum necessary access to perform their job functions.
Question
_____________ states that users should only be given enough access to accomplish their jobs.
Options
- ASeparation of Duties
- BDue Diligence
- CConcept of Least Privilege
- DAll of the listed items are correct
How the community answered
(19 responses)- A5% (1)
- C89% (17)
- D5% (1)
Why each option
The Concept of Least Privilege is a security principle requiring users to be granted only the minimum necessary access to perform their job functions.
Separation of Duties is a principle where no single individual has complete control over a critical process, requiring multiple people to complete a task, which is different from granting minimal access.
Due Diligence refers to the ongoing effort to identify risks and maintain a standard of care to protect an organization's assets, which is a broader organizational responsibility, not a specific access control principle.
The Concept of Least Privilege is a fundamental security principle ensuring that users, processes, and systems have only the minimum necessary access rights or permissions to complete their legitimate tasks. This reduces the attack surface and potential damage from unauthorized actions or security breaches.
Since only option C accurately describes the concept, the statement 'All of the listed items are correct' is false.
Concept tested: Security principles, Least Privilege
Source: https://learn.microsoft.com/en-us/security/zero-trust/govern/least-privilege
Topics
Community Discussion
No community discussion yet for this question.