hardMultiple SelectObjective-mapped
ISC2 CC Practice Question: Which TWO of the following are examples of…
Which TWO of the following are examples of implementing the principle of least privilege?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Assigning a database administrator only the permissions required for their specific tasks
The correct answers are B and E. Option B assigns a database administrator only the permissions required for their tasks, directly applying least privilege. Option E grants a user only read-only access to a file they need to view, also minimizing privileges. Option A (security camera) is a physical security control, not least privilege. Option C (two-factor authentication) is an example of defense in depth. Option D (firewall rule) is a network security measure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Installing a security camera at the data center entrance
Why it's wrong here
This is a physical security control.
- ✓
Assigning a database administrator only the permissions required for their specific tasks
Why this is correct
This minimizes privileges to job duties.
- ✗
Requiring two-factor authentication for system administrators
Why it's wrong here
This is an authentication mechanism, not privilege restriction.
- ✗
Implementing a firewall to block all incoming traffic except on port 443
Why it's wrong here
This is a network security control, not least privilege.
- ✓
Granting a user read-only access to a file they need to view
Why this is correct
This restricts permissions to only what is needed.
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
One-time Password
A one-time password is a temporary, single-use code that authenticates a user for one login session or transaction.
Key term
Least privilege
Least privilege is a security principle that means giving users, systems, or programs only the minimum permissions they need to do their job and nothing more.
About these practice questions
This CC question is part of Courseiva's 976-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on CC
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE of the following are examples of the principle of least privilege? (Select THREE.)
medium- ✓ A.Granting a user only the permissions needed to perform their job
- B.Giving all employees full access to the file server
- ✓ C.Allowing a contractor access only during their contract period
- ✓ D.Providing read-only access to a database for a reporting analyst
- E.Assigning administrator rights to all employees by default
Why A: The principle of least privilege dictates that a user should be granted only the permissions necessary to perform their job functions. This minimizes the attack surface and limits potential damage from accidental or malicious actions. In practice, this means assigning specific roles or access control lists (ACLs) rather than broad permissions.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.