Question

Which of the following security concepts establishes the notion that a user should only be given sufficient access to the resources they need to perform their job function?

A. Deny all
B. Allow all
C. Most privilege
D. Least privilege

Answer 1

The correct answer is D. Least privilege, which is a security concept advising that users should only have the access necessary to perform their roles.

Step-by-step explanation:

The security concept that establishes the notion that a user should only be given sufficient access to the resources they need to perform their job function is known as the principle of least privilege.

This principle advocates for minimizing user permissions and access levels to what is absolutely required to perform their duties, reducing the risk of data breaches or other security incidents caused by excessive permissions.