Which principle states users should receive minimum access necessary for tasks?

Which principle states users should receive minimum access necessary for tasks?

• A. Access transformation initiatives
• B. Principle of Least Privilege
• C. One-Time Password
• D. Audit controls

Answer: (B)

This item tests the principle of least privilege: give users only the minimum access they need to perform their tasks. By restricting permissions to the smallest scope necessary, you minimize the blast radius if an account is compromised, limit accidental or intentional misuse, and make it easier to audit and monitor activity. In practice, you implement this through careful role design, need-to-know controls, and the option of temporary or just-in-time elevated access for privileged tasks, with regular reviews to remove anything no longer required. The other options don’t describe restricting access: a one-time password is about authentication, audit controls focus on monitoring actions, and the term about access transformation initiatives isn’t a standard concept for minimizing permissions.

This item tests the principle of least privilege: give users only the minimum access they need to perform their tasks. By restricting permissions to the smallest scope necessary, you minimize the blast radius if an account is compromised, limit accidental or intentional misuse, and make it easier to audit and monitor activity. In practice, you implement this through careful role design, need-to-know controls, and the option of temporary or just-in-time elevated access for privileged tasks, with regular reviews to remove anything no longer required. The other options don’t describe restricting access: a one-time password is about authentication, audit controls focus on monitoring actions, and the term about access transformation initiatives isn’t a standard concept for minimizing permissions.