SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/aplus-least-privilege

Which principle says users should get only the minimum access needed to do their job?

Least privilege.

Start playing free

  1. Separation of duties
  2. Defense in depth
  3. Least privilege ✔

Why: Least privilege limits what users and processes can do to the minimum needed for assigned tasks. It reduces the damage from mistakes or stolen accounts.

Huh, didn't know that: NIST also applies least privilege to processes acting on behalf of users.

The dad joke
Why did the programmer quit his job? He didn't get arrays (a raise).
Like this card?
Play the game

References

Answer: Least privilege. Least privilege limits what users and processes can do to the minimum needed for assigned tasks. It reduces the damage from mistakes or stolen accounts.

  1. Least privilege, NIST CSRC glossary csrc.nist.gov/glossary/term/least_privilege
    restrict the access privileges of users (or processes acting on behalf of users) to the minimum necessary to accomplish assigned tasks
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhich Windows feature encrypts an entire drive volume to protect data on lost or stolen devices?Security & PrivacyWhich feature encrypts removable drives such as USB flash drives in Windows?Security & PrivacyWhich Windows feature encrypts individual files and folders on NTFS volumes?

That's stuff everyone should know.