What security principle restricts user access to the minimum necessary rights to perform their job?

What security principle restricts user access to the minimum necessary rights to perform their job?

• A. Data encryption
• B. Principle of least privilege
• C. Multi-factor authentication
• D. Segregation of duties

Answer: (B)

The principle of least privilege means giving each user only the minimum permissions needed to perform their tasks. This limit reduces the chance of mistakes or misuse, and it confines the impact if credentials are compromised. In practice, it’s supported by access controls, role-based access, need-to-know policies, and regular reviews to trim unnecessary rights, with often occasional just-in-time elevation for specific tasks. Data encryption protects data itself, not who can access it or what they can do with it. Multi-factor authentication strengthens who can sign in, not the scope of a user’s rights once they’re logged in. Segregation of duties helps prevent fraud by dividing critical tasks among people, which is related but addresses process controls rather than precisely restricting daily access rights. The stated principle directly targets limiting user rights to what is necessary for their job.

The principle of least privilege means giving each user only the minimum permissions needed to perform their tasks. This limit reduces the chance of mistakes or misuse, and it confines the impact if credentials are compromised. In practice, it’s supported by access controls, role-based access, need-to-know policies, and regular reviews to trim unnecessary rights, with often occasional just-in-time elevation for specific tasks.

Data encryption protects data itself, not who can access it or what they can do with it. Multi-factor authentication strengthens who can sign in, not the scope of a user’s rights once they’re logged in. Segregation of duties helps prevent fraud by dividing critical tasks among people, which is related but addresses process controls rather than precisely restricting daily access rights. The stated principle directly targets limiting user rights to what is necessary for their job.