What is the practice of giving employees only those permissions necessary to perform their specific role within an organization?

What is the practice of giving employees only those permissions necessary to perform their specific role within an organization?
A . least privilege
B . need to know
C . integrity validation
D . due diligence

View Answer

Answer: A

Explanation:

The principle of least privilege states that users and processes should be granted only the minimum permissions necessary to perform their specific role or function within an organization. This reduces the attack surface and limits the potential damage of a compromised account or process.

Reference: Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) v1.0, Module 1: Security Concepts, Lesson 1.2: Security Principles

Cisco Certified CyberOps Associate Overview, Exam Topics, 1.1 Explain the CIA triad