Which statement best reflects the principle of least privilege?

• A. Grant access only when needed
• B. Remove access when no longer needed
• C. Only have access to the things you need
• D. All of the above

Answer: (D)

The principle of least privilege means giving users the minimum level of access they need to do their work. Granting access only when needed ensures permissions are provided solely for the task at hand. Removing access when no longer needed stops privileges from lingering and being misused later. Only have access to the things you need reinforces the idea that access should be restricted to essential resources, nothing extra. When you put these ideas together, they cover provisioning, deprovisioning, and scope, so all of the above statements together best reflect least privilege.