01 In an office access to a confidential document is given only to employees whose work requires it. Which principle is this based on?
Answer and explanation
Correct answer: A. Restricted access according to need
Explanation: The governing security concept is least privilege, also called need-to-know access. Each employee receives only the permission required for assigned duties, which limits accidental disclosure, misuse and the effect of a compromised account. Giving everyone full access violates confidentiality; public broadcasting exposes the document, and removing passwords eliminates an important control. Thus restricted access according to need is correct.