What does the principle of least privilege require?
- A Every account gets only the minimum access needed for its role
- B All users get administrator rights for convenience
- C Access is granted permanently once approved
- D Only managers hold privileged accounts
Answer
Every account gets only the minimum access needed for its role
It limits both accidental damage and the blast radius when an account is compromised, which is why it is a foundational control.





