What is the practice of giving an employee access to only the resources needed to accomplish their job?

What is the practice of giving an employee access to only the resources needed to accomplish their job?
A . principle of least privilege
B . organizational separation
C . separation of duties
D . need to know principle

View Answer

Answer: A

Explanation:

The principle of least privilege is a security best practice that states that an employee should have access to only the minimum amount of resources and permissions needed to perform their job function. This principle reduces the attack surface and the potential damage that can be caused by a compromised account, a malicious insider, or human error. The principle of least privilege can be enforced by using role-based access control (RBAC) and regular audits.

Reference: Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) – Cisco, page 1-10; 200-201 CBROPS – Cisco, exam topic 1.2.a