Which principle ensures users have only the minimum access needed?

• A. Defense in Depth
• B. Full Access
• C. Role-Based Access Control
• D. Least Privilege

Answer: (D)

Least privilege means you grant only the minimum rights needed for a task. This limits what a user can access and do, so if an account is compromised or misused, the potential damage is contained. It’s the core principle here because it directly describes restricting access to the smallest necessary scope. Other options describe broader strategies or methods: defense in depth refers to multiple layered protections, full access would expose everything, and RBAC is a way to implement permissions, but the principle itself is about giving the least privileges required.