Question
Following a security breach, a database administrator needs to ensure users cannot change data unless a request is approved by the management team. Which of the following principles addresses this issue?
- A. Open access
- B. Least resistance
- C. Elevated privilege
- D. Least privilege Correct
Explanation
Least privilege grants users only the permissions they need for their job, so ordinary users get read access and write rights are granted only when a request has been approved by management. Elevated privilege is the opposite of what is needed, and open access and least resistance are not security principles that restrict changes.
