Multiple choice technology security

The principle of least privilege as it applies to Access control mandates that:

  1. Group based access control should be implemented to assign permissions to application users

  2. Consistent authorization checking should be performed on all application pages

  3. A set of all allowable actions should be defined for each user role and all other's denied

  4. All failed access authorization requests should be logged to a secure location for review by administrators
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The principle of least privilege means each user role gets only the minimum permissions needed to perform their job - all actions are denied by default except those explicitly allowed. Group-based access, authorization checking, and logging are important security practices but do not define least privilege itself.

Keep practicing — related questions