QuestionQ243Verified/Access ControlsCopy linkReport a problemAsk AstroTutorSave questionEnsuring least privilege does not entail:AIdentifying what the user's job is.BEnsuring that the user alone does not have sufficient rights to subvert an important process.CDetermining the minimum set of privileges required for a user to perform their duties.DRestricting the user to required privileges and nothing more.Show AnswerAnswerExplanationLeast privilege limits each user to only the access necessary for assigned tasks. Ensuring that no single user can independently subvert an important process is separation of duties, which divides conflicting responsibilities among different individuals or roles. NIST: Least Privilege NIST: Separation of DutyLearn moreNIST CSRC Glossary: Least PrivilegeNIST CSRC Glossary: Separation of DutyShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion