The Principle of Least Privilege states that every user, process, and device should be granted only the minimum rights and permissions necessary to perform required duties. In practice, Team A would receive access only to the resources it needs, but not to Team B's files.
Why the other options are incorrect:
Shared Account Password Management (SAPM) focuses on securely storing and rotating shared privileged passwords; it does not address limiting normal user access to files.
Privacy Restrictions is a vague term, not a formal security model for access control.
Entry Control Roster (ECR) is a physical-security list of people authorized to enter a restricted area and is unrelated to file permissions.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are some examples of implementing the Principle of Least Privilege?
Open an interactive chat with Bash
How is the Principle of Least Privilege different from Role-Based Access Control (RBAC)?
Open an interactive chat with Bash
Why is Shared Account Password Management (SAPM) not applicable to this scenario?