ISC2 Certified in Cybersecurity (CC) Practice Question

The principle of least privilege requires that users receive only the minimum permissions necessary to perform their job duties. Granting a financial analyst read-only access to the report server limits the analyst to viewing data, preventing unintended or malicious changes while still allowing the analyst to do their work. Each incorrect choice provides broader permissions than needed: giving developers full administrator rights, equating temporary staff privileges with permanent employees, or granting a project manager unrestricted access to all file shares all violate least-privilege by exceeding the minimum required access.