What is the primary goal of least privilege in access control?

• A. Reduce risk of abuse or error by limiting permissions.
• B. Maximize user productivity by granting broad access.
• C. Eliminate all need for logging.
• D. Prohibit all access.

Answer: (A)

Least privilege means giving someone only the minimum permissions they need to do their job. This limits what a user can do, so the potential for abuse or accidental errors is reduced and the impact of any credential compromise is contained. In practice, you grant access by role and need, regularly review rights, and use temporary or just-in-time elevations when higher permissions are truly required. It’s not about broad access to boost productivity, nor about eliminating logging, nor about prohibiting all access; legitimate tasks still require appropriate rights.