Certified Incident Handler (CIH) Practice Ecam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Certified Incident Handler (CIH) Exam. Enhance your knowledge with interactive quizzes and detailed insights into cyber incident handling. Boost your exam readiness with our expert-designed questions!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which phrase best describes the principle of least privilege?

  1. Users have access to all organizational resources

  2. Users have only the access necessary to complete their tasks

  3. Access is granted based on seniority

  4. Access is permanent for all users

The correct answer is: Users have only the access necessary to complete their tasks

The principle of least privilege emphasizes that users should only be granted the minimum level of access necessary to perform their job functions. This approach reduces the risk of accidental or intentional misuse of resources or data. By limiting access rights, organizations can protect sensitive information and systems from unauthorized access, thereby enhancing overall security. This principle helps minimize the attack surface in a system because even if an account is compromised, the damage that can be done is limited since the attacker would have restricted access. Implementing this principle ensures better control over user permissions and helps align with security best practices within an organization.