Ensuring least privilege does not require:

The correct answer is B. Ensuring that the user alone does not have sufficient rights to subvert an important process. Ensuring that the user alone does not have sufficient rights to subvert an important process is a concern of the separation of duties principle and it does not concern the least privilege principle.

Submitted by yuriko_h· Apr 18, 2026Access Controls

Question

Options

AIdentifying what the user's job is.
BEnsuring that the user alone does not have sufficient rights to subvert an important process.
CDetermining the minimum set of privileges required for a user to perform their duties.
DRestricting the user to required privileges and nothing more.

How the community answered

(43 responses)

A
2% (1)
B
93% (40)
C
5% (2)

Explanation

Ensuring that the user alone does not have sufficient rights to subvert an important process is a concern of the separation of duties principle and it does not concern the least privilege principle.

Topics

#Least Privilege#Separation of Duties#Access Control Principles#Security Principles

Community Discussion

No community discussion yet for this question.

Full SSCP Practice