Which option best aligns with the principle of Least-Privilege?

Which option best aligns with the principle of Least-Privilege?

• A. Granting users administrator rights for all resources
• B. Providing users with access only to resources necessary for their job
• C. Giving all users read access to all files
• D. Denying all access to every resource

Answer: (B)

The principle of least privilege is about giving users only the permissions they need to do their jobs, nothing more. The option that provides access only to resources necessary for the job best embodies this idea, because it minimizes potential damage from mistakes or a compromised account by restricting what can be accessed or modified. In Windows Server, you implement this with careful role-based access control, assigning people to appropriate groups and granting permissions that match their duties, rather than broad, blanket access. It also supports safer administration by enabling practices like Just Enough Administration for elevated tasks. The other approaches either give too much access or block work, which defeats the purpose of least privilege.

The principle of least privilege is about giving users only the permissions they need to do their jobs, nothing more. The option that provides access only to resources necessary for the job best embodies this idea, because it minimizes potential damage from mistakes or a compromised account by restricting what can be accessed or modified. In Windows Server, you implement this with careful role-based access control, assigning people to appropriate groups and granting permissions that match their duties, rather than broad, blanket access. It also supports safer administration by enabling practices like Just Enough Administration for elevated tasks. The other approaches either give too much access or block work, which defeats the purpose of least privilege.