What is the principle of 'least privilege' in cybersecurity? MCQ with Answer and Explanation

What is the principle of 'least privilege' in cybersecurity?
A. Granting access based on seniority
B. Granting users the minimum levels of access necessary to perform their tasks
C. Granting access to all employees
D. Granting all users full access
Answer: Option B
Solution (By JKSSB Mock Tests)
The principle of least privilege means providing users with only the access and permissions they need to perform their job functions, reducing the risk of misuse or unauthorized access.

Discuss this Question (0)

No comments yet. Be the first to start the discussion!

Practice More Cyber Security Questions

Question #1
What is the purpose of a digital certificate?
A. To compress a file
B. To speed up data transmission
C. To encrypt a message
D. To verify the identity of an entity in a digital communication

Correct Answer: Option D


Explanation:
A digital certificate is an electronic document that uses a digital signature to bind a public key with an identity, verifying the owner's authenticity in online communications.

This question belongs to: Computer Cyber Security
Question #2
Which type of antivirus detection strategy analyzes an unverified program's instruction codes for malicious traits, helping it flag new threats even if the file hash is missing from standard databases?
A. Database Static Lookup
B. Heuristic Analysis / Behavioral Monitoring
C. Static Signature Masking
D. Cryptographic Indexing

Correct Answer: Option B


Explanation:
Heuristic analysis checks software patterns and rules of behavior to detect unknown zero-day malware variants that lack established signature profiles.

This question belongs to: Computer Cyber Security
Question #3
Which of the following is a method to prevent SQL injection attacks?
A. Installing antivirus
B. Using a firewall
C. Using strong passwords
D. Using parameterized queries

Correct Answer: Option D


Explanation:
Parameterized queries are a programming technique that prevents SQL injection by treating user input as data, not as part of the SQL command.

This question belongs to: Computer Cyber Security