Exam 200-201 topic 1 question 15 discussion

Least Privilege vs. Separation of Duties - “Separation of Duties” has to do with splitting tasks among employees to reduce the chance of one employee committing fraud. - “Least Privilege” is when you only provide employees with the account privileges they need to complete their work. - The principle of least privilege can support the separation of duties.

The security principle violated by running all processes as root or administrator is the "principle of least privilege." The principle of least privilege states that users and applications should only have the minimum permissions required to perform their necessary tasks, and no more. By running all processes as the root or administrator account, all processes are given full permissions, which could pose a security risk if a malicious process is executed.

A. principle of least privilege

Least Privilege vs. Separation of Duties - “Separation of Duties” has to do with splitting tasks among employees to reduce the chance of one employee committing fraud. - “Least Privilege” is when you only provide employees with the account privileges they need to complete their work. - The principle of least privilege can support the separation of duties. https://www.cubcyber.com/what-is-the-difference-between-separation-of-duties-and-least-privilege#:~:text=Least%20Privilege%20vs%20Separation%20of,need%20to%20complete%20their%20work.

A is correct

page 73 of book talks about separation of duties, where 2 people in an organization can not have rights to the same thing.

A IS CORRECT

You could argue that A, B and C are all violated (but that would be very nitpicky). But principle of least privileges would surely be the right answer here.