🎴 Flashcard Mode
Application Security and ASAP Framework
Card1 / 13
Mastered0
Review0
QuestionClick to flip
The principle of least privilege as it applies to Access control mandates that:
AnswerClick to flip back
A
A set of all allowable actions should be defined for each user role and all other's denied
💡 Explanation:
The principle of least privilege means granting only the minimum necessary access. Option C correctly states this: define exactly what each role CAN do, deny everything else by default. Group-based access (A) is an implementation detail, not the principle itself. Consistent checking (B) is about execution, not privilege assignment. Logging failures (D) is auditing, not the principle itself.