What concept restricts rights, accounts and processes to only those who require them?

What concept restricts rights, accounts and processes to only those who require them?

• A. Role-Based Access Control
• B. Least-privilege
• C. Delegated Privilege
• D. Rule-Based Access Control

Answer: (B)

The principle of least privilege: grant each user, account, or process only the minimum rights needed to perform its tasks. This limits what can be done if credentials are compromised and reduces the potential damage from mistakes or exploits. In practice, you avoid giving broad, unnecessary permissions and escalate access only when truly necessary and for a limited duration. While other approaches like role-based access control, rule-based access control, or delegated privilege organize or distribute permissions in different ways, they don’t inherently enforce the tight minimal access that least privilege requires.

The principle of least privilege: grant each user, account, or process only the minimum rights needed to perform its tasks. This limits what can be done if credentials are compromised and reduces the potential damage from mistakes or exploits. In practice, you avoid giving broad, unnecessary permissions and escalate access only when truly necessary and for a limited duration. While other approaches like role-based access control, rule-based access control, or delegated privilege organize or distribute permissions in different ways, they don’t inherently enforce the tight minimal access that least privilege requires.