CompTIA Project+ PK0-005 Practice Question

Before granting access to sensitive information like trade secrets, it is important to confirm that the team member has both the appropriate clearance and a legitimate need-to-know. This ensures that only authorized individuals access confidential data, reducing the risk of unauthorized disclosure. Simply providing the files because they are part of the team ignores the principle of least privilege. Denying the request outright could hinder project progress if the team member genuinely needs the information to perform their duties. Requiring a nondisclosure agreement may be necessary, but it does not replace the need to verify clearance and need-to-know.