SSCP · Question #1296
The term "principle of least privilege" is best as:
The correct answer is C. The process of granting each user the lowest clearance and access needed to accomplish. The principle of least privilege dictates that users, programs, or processes should only be granted the minimum necessary permissions to perform their specific tasks.
Question
The term "principle of least privilege" is best as:
Options
- AA separation of command, program and interface functions
- BActive monitoring with network base intrusion detection systems and host based intrusion
- CThe process of granting each user the lowest clearance and access needed to accomplish
- DImplementation of mandatory access control
How the community answered
(63 responses)- A5% (3)
- B3% (2)
- C90% (57)
- D2% (1)
Why each option
The principle of least privilege dictates that users, programs, or processes should only be granted the minimum necessary permissions to perform their specific tasks.
Separation of duties is the concept related to separating command, program, and interface functions, not the principle of least privilege.
Active monitoring with intrusion detection systems is a security control measure, but it does not define the principle of least privilege.
The principle of least privilege is a security concept where users are given only the access rights essential to perform their job functions, thereby limiting potential damage from compromise or error. This ensures that even if an account is compromised, the attacker's reach is restricted to only the necessary resources.
Mandatory access control (MAC) is an access control model where security labels are used to enforce access, which is a method of access control, not the definition of least privilege itself.
Concept tested: Principle of Least Privilege
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implement-least-privilege
Topics
Community Discussion
No community discussion yet for this question.