Which security concept gives a user only the permissions required to perform assigned tasks and nothing more?

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

Technical deep dive

How to think about this question

The principle of least privilege is a fundamental security concept that restricts users’ access rights to the minimum necessary to perform their assigned tasks. In Cisco networking and security contexts, this means configuring user accounts, device access, and network permissions so that users cannot access resources or execute commands beyond their job requirements. This reduces the attack surface by limiting potential damage from accidental or malicious misuse. Implementing least privilege involves carefully defining roles and permissions on network devices, such as routers and switches, using features like role-based access control (RBAC) and access control lists (ACLs). Network administrators assign only the essential commands and resource access to each user or group, preventing unauthorized configuration changes or data exposure. This approach aligns with Cisco’s security best practices and is critical for compliance and risk management. A common exam trap is confusing least privilege with broader security concepts like defense in depth or segmentation. While defense in depth uses multiple security layers and segmentation isolates network zones, neither specifically limits user permissions to the minimum required. Understanding least privilege’s focus on user access control helps avoid this confusion and ensures correct application in Cisco environments, where precise permission management is vital for secure network operations.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask