CISSP-ISSMP: Information Systems Security Management Professional

By ISC · Question Mode

QuestionQ191

VerifiedSecurity Operations

You are the Network Administrator for a software company. Because of the nature of the company’s business, many users are highly computer savvy. However, you have decided to limit each user’s access to only the resources needed for their job rather than grant broader access to technical users, such as tech support and software engineering personnel. What is this an example of?

Explanation

The principle of least privilege grants each user only the access permissions required to perform assigned job duties, regardless of the user’s technical skill level.

Community Discussion

No comments yet. Be the first to start the discussion!