Question

An access control strategy that gives a user or group of users only those powers which are absolutely essential to do the job required is called the: a. principle of least privilege. b. principle of user control. c. principle of essential power. d. group level rule.

Answer 1

Answer:

A. principle of least privilege

Explanation:

According to The Principle of Least Privilege, a subject should be given only those privileges that are essential for it to complete its task. The principle works by giving just enough access to perform the required job. It dictates that users be assigned the least set of privileges they need to do their jobs, according to their roles. The principle aids in the creation of protective systems.