SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-least-privilege

Giving each user only the access needed for their assigned tasks follows which principle?

Least privilege, only the access necessary to do the job.

Start playing free

  1. Least privilege ✔
  2. Separation of networks
  3. Security through obscurity

Why: If an account is stolen or misused, least privilege limits the damage. Admin rights should go only to those who need them, and only when needed.

Huh, didn't know that: NIST SP 800-53 says disabling expired or inactive accounts supports least privilege and shrinks a system's attack surface.

The dad joke
Least privilege is why the intern can print but cannot delete the company.
Like this card?
Play the game

References

Answer: Least privilege. If an account is stolen or misused, least privilege limits the damage. Admin rights should go only to those who need them, and only when needed.

  1. NIST SP 800-53 Rev. 5, Security and Privacy Controls nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
    Employ the principle of least privilege, allowing only authorized accesses for users
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhich hardening step reduces the attack surface by removing what a system does not need?Security & PrivacyA list of applications authorized to run, with everything else blocked by default, is called what?Security & PrivacyWhich control limits how many failed login attempts can be made on an account?

That's stuff everyone should know.