The idea of giving users, programs and services only the minimum privileges needed to do their job. It keeps the scope of damage small even if an account is taken over, malware runs or someone makes a mistake.
Japanese name: 最小権限の原則
Principle of least privilege appears in 2 practice questions across 2 topics, including Information Security Basics, Linux and Command-Line Basics.
Field: Information Security Basics
Answer: C. Giving users and programs only the minimum rights needed for their work, and doing everyday work with a non-administrator account
The principle of least privilege means giving users, programs and service accounts only the minimum rights needed to do their job. With limited rights, the damage can be kept small even when an account is taken over, malware runs or someone makes a mistake. For example, everyday email and web browsing is done with a standard account, and administrator rights are used only for tasks that need them. For information there is the related idea of need-to-know, in which only people who need the information for their work can access it. Promptly revoking rights that are no longer needed after a transfer or departure is also important.
The principle of least privilege means giving users, programs and service accounts only the minimum rights needed to do their job.
Which practice follows the principle of least privilege?Keeping privileges to the minimum necessary is based on the principle of least privilege in security.
Which of the following correctly describes the sudo command…As an Amazon Associate I earn from qualifying purchases.
Superuser File permissions Cross-site scripting (XSS) Digital signature Hash function Message authentication code Multi-factor authentication Phishing Public-key cryptography Ransomware