📢 Too many exams? Don’t know which one suits you best? Book Your Free Expert 👉 call Now!
  • google app store apple app store
    • ✖

      Question

      What is the 'Principle of Least Privilege' (PoLP) in

      cybersecurity?
      A Giving all users administrator access to maximize productivity and minimize help desk calls Correct Answer Incorrect Answer
      B Restricting cybersecurity team privileges to prevent conflicts of interest between other team members Correct Answer Incorrect Answer
      C Limiting security budgets to the minimum required by regulatory compliance Correct Answer Incorrect Answer
      D Applying security patches only to the most critical systems to minimize disruption in case of a security breach Correct Answer Incorrect Answer
      E Security principle that every user, process, and system component should have only the minimum access rights Correct Answer Incorrect Answer

      Solution

      PoLP minimizes the attack surface which means if an account is compromised, the attacker gains only limited access. Implementation of PoLP can be done through Role-Based Access Control (RBAC), Just-In-Time (JIT) access for privileged accounts, regular access reviews and deprovisioning and separation of duties (no single person can both initiate and approve a transaction).  In banks a teller has access to transaction processing but not to system administration or loan approval. DBA accounts should not have internet access. Privileged Access Management (PAM) solutions enforce PoLP for admin accounts.

      Practice Next
      More IT Networking Questions

      Relevant for Exams:

      ask-question