Web Security · Junior · Question 4 of 75
What does the principle of least privilege mean?
- 1Permissions are granted for the shortest possible password
- 2Only the least experienced developers get production access
- ✓Correct answer: Each user, service or token gets only the permissions it needs for its job, nothing more
Explanation
If an account or key with minimal rights is compromised, the damage is limited. A database user for a read-only report, for example, shouldn't be able to drop tables.