Term addresses granting more permissions than necessary?

Term addresses granting more permissions than necessary?

• A. Insufficient Access
• B. Excessive Access Rights
• C. Cost Justification
• D. Administrator Access

Answer: (B)

Excessive access rights describe giving users more permissions than they actually need to perform their roles. This breaks the practice of least privilege, which aims to limit every user to the minimum privileges required. When people have more access than necessary, the risk rises: a compromised account or internal misuse can lead to broader data exposure and easier movement within systems. It also makes audits and compliance harder because权限 become harder to justify. Remedies include implementing role-based access control, conducting regular access reviews, and using just-in-time access to revoke privileges when they aren’t needed. The other choices aren’t the term for this situation: insufficient access is the opposite problem, cost justification relates to financial value, and administrator access is just a high-privilege role, not the issue of granting too much access.

Excessive access rights describe giving users more permissions than they actually need to perform their roles. This breaks the practice of least privilege, which aims to limit every user to the minimum privileges required. When people have more access than necessary, the risk rises: a compromised account or internal misuse can lead to broader data exposure and easier movement within systems. It also makes audits and compliance harder because权限 become harder to justify. Remedies include implementing role-based access control, conducting regular access reviews, and using just-in-time access to revoke privileges when they aren’t needed. The other choices aren’t the term for this situation: insufficient access is the opposite problem, cost justification relates to financial value, and administrator access is just a high-privilege role, not the issue of granting too much access.