CompTIA Data+ DA0-002 (V2) Practice Question

The principle of least privilege states that each user should be granted only the minimum permissions necessary to perform current job functions. If membership in the Marketing_Analyst role had been removed when the intern changed jobs, she would not have retained unneeded access to marketing tables.

Separation of duties focuses on splitting sensitive tasks among different roles to avoid fraud, not on pruning excess permissions. Mandatory access control is a different, highly restrictive model enforced centrally through security labels, and attribute-based access control grants rights dynamically based on attributes rather than predefined roles. Therefore, least privilege is the only principle that directly addresses the problem of users accumulating more privileges than they require.