Free CompTIA Security+ SY0-701 Practice Question

The principle of least privilege requires that users are granted only the minimal necessary permissions to perform their duties. This reduces the risk of unauthorized access or actions, as there are fewer privileges that can be exploited.

Separation of duties involves dividing tasks among multiple people to prevent fraud and errors. Need-to-know restricts access to information only to individuals who require it to perform specific tasks. Mandatory access control is a model where access rights are regulated by a central authority based on multiple levels of security.