100-160 Question 28
Single answerYour organization is implementing a new role-based access control (RBAC) system to manage user access to critical applications. During a security audit, it is discovered that some users have more privileges than they need to perform their job functions, which violates access management principles. What principle should be applied to address this issue?
- A
Principle of Least Privilege
- B
Separation of Duties
- C
Multi-Factor Authentication
- D
Access Control Lists (ACLs)
Show answer and explanation
Correct answer: A
Explanation
The Principle of Least Privilege is a foundational concept in access management. It ensures users only have the permissions necessary to perform their job roles, reducing the risk of misuse or accidental damage. Applying this principle resolves the issue of excessive privileges revealed in the audit.
- A. Correct.
The Principle of Least Privilege requires that users only have the minimum access necessary to perform their job functions. This directly addresses the issue of users having excessive privileges.
- B. Incorrect.
Separation of Duties is about dividing tasks among multiple individuals to prevent fraud or error, but it does not directly address the issue of excessive privileges.
- C. Incorrect.
Multi-Factor Authentication enhances authentication security but does not resolve issues related to excessive access privileges.
- D. Incorrect.
Access Control Lists (ACLs) are used to manage permissions for specific resources, but they are a mechanism for enforcement rather than a principle to guide access management.