The concept of restricting rights, accounts and processes to only those who require them is known as?

The concept of restricting rights, accounts and processes to only those who require them is known as?

• A. Role-Based Access Control
• B. Delegated Privilege
• C. Least-privilege
• D. Rule-Based Access Control

Answer: (C)

The main idea is the principle of least privilege: give every user, account, and process only the minimum rights needed to perform its tasks. This reduces the risk if an account is compromised and limits potential damage from mistakes or abuse. In practical terms, everyday users shouldn’t have admin rights, services should run with only the privileges they require, and elevation should be temporary and tightly controlled (for example, using Just-In-Time admin access). Role-Based Access Control is a way to implement permissions by grouping them into roles, which can support least privilege, but the concept described is the minimal-privilege approach itself. Delegated Privilege would add privileges to others, and Rule-Based Access Control relies on policies—neither captures the minimalist grant as directly as least privilege.

The main idea is the principle of least privilege: give every user, account, and process only the minimum rights needed to perform its tasks. This reduces the risk if an account is compromised and limits potential damage from mistakes or abuse. In practical terms, everyday users shouldn’t have admin rights, services should run with only the privileges they require, and elevation should be temporary and tightly controlled (for example, using Just-In-Time admin access). Role-Based Access Control is a way to implement permissions by grouping them into roles, which can support least privilege, but the concept described is the minimal-privilege approach itself. Delegated Privilege would add privileges to others, and Rule-Based Access Control relies on policies—neither captures the minimalist grant as directly as least privilege.