Question

An organization ensures that users are granted access to only the data they need to perform specific work tasks. What principle are they following?
A. Principle of least permission
B. Separation of duties
C. Need to know
D. Role-based access control

Answer 1

Answer:A. Principle of least permission

Explanation:The principle of least privilege (POLP), a crucial term in computer security or privacy, is the practice of restricting or minimising access rights for users to only a minimum permissions they need to perform their work.

In this principle, users are only permitted to read, write or execute only the files or resources required to complete their work given tasks: hence they are given the least amount of privilege necessary.

In addition the principle of least privilege can be applied to restricting access rights for applications, systems, processes and devices to only those permissions required to perform authorized activities.

Superuser accounts mostly IT people may be given an advanced access as compared to just normal users.