ANS: A
Least privilege focus on minimizing potential system damage, ensuring that each employee should have minimum resources to perform their task, e.g files, network, application.
While, need to know focus on restricting access to sensitive information like personal data, sensitive data, classified document, and providing them with information they need to know to perform their tasks.
The answer is D.
Somewhat related to the principle of least privilege is the concept of “need to know,” which means that users should get access only to data and systems that they need to do their job, and no other. (From Cisco Press)
D is the correct.
The Need-to-know security principle: This principle states that a user shall only have access to the information that their job function requires, regardless of their security clearance level or other approvals.
See also: https://www.ciscopress.com/articles/article.asp?p=2783637
A is the correct answer
upvoted 4 times
...
This section is not available anymore. Please use the main Exam Page.200-201 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
036e554
10 months, 3 weeks agoWISDOM2080
1 year, 8 months agocryptonite
2 years agoevra
3 years agohalamah
3 years, 6 months agoLeo_Visser
3 years, 11 months ago