CompTIA A+ 220-1102 (V14) Practice Question

The principle of least privilege states that users should receive only the rights needed to perform their duties. Administrators should therefore use a dedicated, separate account with elevated permissions only when performing maintenance or management tasks. Using a standard account for daily activities reduces the risk that malware or mistakes will occur with full system rights. Disabling MFA, sharing generic admin accounts, or keeping permanent administrator rights attached to a daily-use account all violate this principle and weaken accountability.