hardMultiple SelectObjective-mapped
200-201 Practice Question: According to the principles of least privilege,…
According to the principles of least privilege, which THREE of the following access controls should be implemented for a typical user account? (Choose three.)
⚠ Common exam trap
Cisco often tests the misconception that 'typical users need administrative rights for productivity,' but the trap here is that candidates confuse convenience with necessity, overlooking that tasks like password changes and home directory access are sufficient for daily work without compromising security.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ability to change their own password
The principle of least privilege dictates that users should have only the permissions necessary to perform their job functions. Allowing a user to change their own password is a standard self-service capability that does not grant elevated privileges, as it only affects their own account and is typically enforced through password policy controls like minimum length and complexity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Administrative rights to the local machine
Why it's wrong here
Local admin rights are powerful and violate least privilege for regular users.
- ✓
Ability to change their own password
Why this is correct
Users need to manage their own passwords.
- ✗
Ability to install software
Why it's wrong here
Installing software is an administrative function, not for typical users.
- ✓
Write access to their own home directory
Why this is correct
Users need to create and modify files in their personal space.
- ✓
Read access to shared company calendar
Why this is correct
Employees typically need to view the company calendar.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-201 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.