Explain the principle of least privilege and why it is important in DSAC contexts.

• A. Users receive the maximum rights to perform tasks.
• B. Privileges are granted to all users for all resources.
• C. Privileges are rotated automatically every hour.
• D. Users receive the minimum rights necessary; reduces risk from abuse or compromise.

Answer: (D)

The principle of least privilege means giving each user only the minimum rights they need to do their job. In DSAC contexts, where access to sensitive data and critical systems matters, limiting a user’s permissions to what’s strictly necessary helps contain potential damage. If an account is compromised or a mistake is made, the attacker or error can’t easily reach resources beyond that small scope. It also makes monitoring and revoking access easier because permissions are tightly tied to specific tasks.

That’s why the correct choice states that users receive the minimum rights necessary and that this reduces risk from abuse or compromise. The other options conflict with this idea: providing maximum rights, or privileges to everyone for everything, expands risk rather than reducing it; and rotating privileges hourly describes a timing aspect rather than a restriction on what rights are granted in the first place, so it doesn’t align with minimizing access.