Your customer has been told by their auditors that they must implement the principle of least
privilege across all their sensitive data, but they are not sure what this means. What explanation will
best explain this principle?
A.
You should grant system privileges to the smallest number of administrators who really need it.
B.
All users will have the least amount of privilege that will allow them to do their jobs.
C.
Access control will be implemented by the least number of administrators.
D.
They should implement a separate set of security procedures to deny access to sensitive data, and
allow the least number of privileged users to avoid these procedures.