Which of the following rules is least likely to support the concept of least privilege?

Question

Options

• AThe number of administrative accounts should be kept to a minimum.
• BAdministrators should use regular accounts when performing routine operations like reading
• CPermissions on tools that are likely to be used by hackers should be as restrictive as possible.
• DOnly data to and from critical systems and applications should be allowed through the firewall.

• A
  8% (3)
• B
  17% (6)
• C
  3% (1)
• D
  72% (26)

Explanation

Least privilege means granting subjects only the minimum access rights necessary to perform their specific tasks. Options A, B, and C all directly support least privilege by limiting admin account counts, restricting admin use of elevated accounts for routine work, and tightening permissions on dangerous tools. Option D - allowing only traffic to and from critical systems through the firewall - is a network segmentation or firewall policy principle, not a least-privilege control. It governs what systems can communicate, not what a given user or process is authorized to do, so it least directly supports the least-privilege concept.

No community discussion yet for this question.