100-160 Question 10
Single answerA company has implemented a new access control system to ensure that employees can only access resources necessary for their job roles. Which essential security principle is primarily being applied in this scenario?
- A
Least Privilege
- B
Confidentiality
- C
Defense in Depth
- D
Non-repudiation
Show answer and explanation
Correct answer: A
Explanation
The principle of least privilege is fundamental to cybersecurity and ensures that users are granted only the permissions necessary to perform their job functions, minimizing potential security risks. In this scenario, the new access control system enforces this principle by limiting employees' access to only the resources they need.
- A. Correct.
The principle of least privilege ensures that users have access only to the resources required for their specific job roles, reducing the risk of unauthorized access.
- B. Incorrect.
Confidentiality refers to protecting sensitive information from being accessed by unauthorized individuals, which is not the primary focus of the scenario.
- C. Incorrect.
Defense in Depth involves layering multiple security controls to create a comprehensive defense strategy, but it is not directly related to access control in this context.
- D. Incorrect.
Non-repudiation ensures that actions or transactions cannot be denied later, which does not apply to the described access control system.