Which statement best reflects the principle of least privilege?

• A. Granting all privileges to administrators only.
• B. Granting only the minimum access needed.
• C. Requiring multi-factor authentication.
• D. Logging every access attempt.

Answer: (B)

Least privilege means giving users only the minimum access rights they need to perform their tasks. This limits the potential damage from mistakes or misuse and reduces the overall risk if an account is compromised. In the scenario, the statement that best reflects this is granting only the minimum access required. Granting all privileges to administrators would provide far more access than necessary, which contradicts the principle. Requiring multi-factor authentication improves identity verification but doesn’t limit what a user can do once authenticated. Logging every access attempt helps with detection and auditing but does not restrict permissions. So the emphasis is on matching access to what is actually needed to do the job.