hardMultiple SelectObjective-mapped
FC0-U71 Practice Question: A database administrator is setting up user…
A database administrator is setting up user permissions. Which THREE actions follow the principle of least privilege?
⚠ Common exam trap
It's easy for candidates to confuse 'flexibility' (Option C) or 'convenience' (Option D) with good security practice, failing to recognize that least privilege requires minimizing access, not maximizing it.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Granting SELECT only on specific tables to a read-only user
Granting SELECT only on specific tables to a read-only user adheres to the principle of least privilege by limiting data access to exactly what the user needs to perform their job. This prevents unnecessary exposure of sensitive data and reduces the risk of accidental or malicious modification. In SQL databases, this is implemented via GRANT SELECT ON specific_table TO user, rather than granting broader permissions like SELECT on all tables or higher-level privileges.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Granting SELECT only on specific tables to a read-only user
Why this is correct
This restricts the user to only read necessary data.
- ✓
Revoking INSERT and DELETE from a user who only needs to view data
Why this is correct
Removing unneeded write permissions follows least privilege.
- ✗
Allowing remote access from any IP address for flexibility
Why it's wrong here
Allowing any IP is too permissive; should be restricted to needed addresses.
- ✗
Granting DBA privileges to all developers for convenience
Why it's wrong here
DBA privileges exceed what developers need, violating least privilege.
- ✓
Granting access to a specific database schema rather than the entire server
Why this is correct
Limiting access to necessary schemas reduces risk.
Go deeper
Related to this question
About these practice questions
This FC0-U71 question is part of Courseiva's 988-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.