What security principle ensures employees only access files needed for their job roles? Learn how the principle of least privilege protects sensitive data and minimizes security risks—key for the Cisco Certified Support Technician (CCST) Cybersecurity 100-160 exam.
Table of Contents
Question
A company’s security policy states that employees should only access files necessary for their job roles. What security principle does this follow?
A. Least privilege
B. Separation of duties
C. Defense in depth
D. Zero trust
E. Need-to-know
Answer
A. Least privilege
Explanation
The least privilege principle restricts access to only what is necessary for work tasks.
The security principle that states employees should only access files necessary for their job roles is the principle of least privilege.
- The principle of least privilege (PoLP) requires that users are granted only the minimum access rights and permissions needed to perform their work tasks—no more, no less.
- This approach limits exposure to sensitive data and reduces the risk of data breaches, insider threats, and accidental or malicious misuse of information.
- Least privilege is implemented through role-based access control (RBAC), where permissions are assigned based on job functions, ensuring users can only interact with files and systems relevant to their responsibilities.
- Regular reviews and audits of user access help maintain least privilege by revoking unnecessary permissions and preventing privilege creep.
- By minimizing access, organizations reduce their attack surface and strengthen their overall cybersecurity posture.
This principle aligns user access strictly with job requirements, protecting sensitive information and supporting cybersecurity best practices.
Cisco Certified Support Technician (CCST) Cybersecurity 100-160 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Cisco Certified Support Technician (CCST) Cybersecurity 100-160 exam and earn Cisco Certified Support Technician (CCST) Cybersecurity 100-160 certification.