mediumMultiple ChoiceObjective-mapped
200-201 Practice Question: A system administrator needs to grant access to a…
A system administrator needs to grant access to a database for a new employee. According to the principle of least privilege, what should be done?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Grant only the minimum required permissions
(Grant only the minimum required permissions) correctly follows the principle of least privilege, ensuring the employee has access only to what is necessary for their role. Option B (Grant temporary admin access) is excessive, as admin rights are not required for normal database access. Option C (Grant no access until manager approves) is too restrictive and does not directly apply least privilege. Option D (Grant full access and remove later) violates least privilege by providing more access than needed initially.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Grant only the minimum required permissions
Why this is correct
This is correct. Granting only the minimum required permissions adheres to the principle of least privilege.
- ✗
Grant temporary admin access
Why it's wrong here
This is incorrect. Granting temporary admin access provides more permissions than necessary, violating least privilege.
- ✗
Grant no access until manager approves
Why it's wrong here
This is incorrect. While requiring manager approval may be a security measure, it does not directly implement least privilege; it is an access control policy.
- ✗
Grant full access and remove later
Why it's wrong here
This is incorrect. Granting full access and later removing it violates least privilege because it grants excessive permissions initially.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-201 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.