Question

The requester of sensitive information should not receive access just because of his or her clearance, position, or rank. The requester must also establish a valid need to see the information. The term for this is: ________.a. least privilegeb. need to knowc. confidential information declassificationd. access control

Answer 1

Answer:

Option b is the correct answer for the above question.

Explanation:

• The "need to know" is a security policy that gives access to the documents to that user only which has permission to see the document or which is the right user to see the document.
• This policy asked some information from the user and block that user who have no knowledge about that information.
• No user can access the document either it has a good position or rank. There is a need to verify the knowledge in front of the site.
• The above question Asked about the policy which is used to give access to the right user. This policy is known as the need to know. so the b option is correct while the other is not because:-

1. Option 'a' states about least privilege which is another security mechanism.
2. Option c states about confidentiality which comes under the need to know.
3. Option d states about access control which is not the correct answer.