What principle describes restricting access rights to only those resources necessary to perform a job?

What principle describes restricting access rights to only those resources necessary to perform a job?

• A. Restricting access rights for users to only those resources that are absolutely required to perform their job.
• B. Granting broad administrator rights to all users.
• C. Allowing users to access any resource as needed.
• D. Removing all access to resources.

Answer: (A)

The principle being tested is the principle of least privilege: grant users only the minimum permissions and access needed to perform their job, nothing more. This reduces the attack surface and limits potential damage if credentials are compromised. In practice, you assign the smallest set of rights, using groups and permissions that cover only the required resources, and you avoid giving broad or unnecessary access. Why this choice fits: it explicitly states restricting access to only what’s absolutely required, which is the essence of least privilege. Why the other ideas don’t fit: granting broad administrator rights gives far more access than needed and increases risk; allowing access to any resource removes control and creates unnecessary exposure; removing all access makes daily work impossible.

The principle being tested is the principle of least privilege: grant users only the minimum permissions and access needed to perform their job, nothing more. This reduces the attack surface and limits potential damage if credentials are compromised. In practice, you assign the smallest set of rights, using groups and permissions that cover only the required resources, and you avoid giving broad or unnecessary access.

Why this choice fits: it explicitly states restricting access to only what’s absolutely required, which is the essence of least privilege.

Why the other ideas don’t fit: granting broad administrator rights gives far more access than needed and increases risk; allowing access to any resource removes control and creates unnecessary exposure; removing all access makes daily work impossible.