Explain the concept of least privilege and how it can be implemented in an IT environment?

• A. Give users the minimum access they need; implement via role-based or attribute-based access controls, regular access reviews, and separation of duties.
• B. Grant all users administrator access; monitor only when problems arise.
• C. Limit access to the network but not to data; ignore audits.
• D. Provide identical access to all users to simplify management.

Answer: (A)