Explain the principle of least privilege and how to apply it in MDC3.

• A. Least privilege means granting everyone full access.
• B. Least privilege means granting only necessary access; enforce via RBAC, ABAC, just-in-time access, and regular reviews.
• C. Least privilege is about limiting password length.
• D. Least privilege refers to data backup frequency.

Answer: (B)

The principle of least privilege means giving each user or process only the minimum permissions needed to perform its job, and nothing more. This limits what an attacker can do if credentials are compromised and helps reduce accidental or intentional damage. In MDC3, apply it by mapping access to actual roles or attributes and enforcing that access with strong controls. Use models like RBAC to assign permissions by job function, or ABAC to base access on specific attributes and context. Just-in-time access can provide temporary privilege elevation when needed, with approvals and automatic expiration so rights aren’t kept longer than necessary. Regular access reviews are important to revoke unused or outdated permissions, and separation of duties ensures no single account can complete conflicting steps in sensitive processes. Strengthen the implementation with MFA for privileged actions, restrict admin rights, secure service accounts, and keep detailed logs of all privilege changes and escalations to support auditing. Automate provisioning and deprovisioning so changes in roles are reflected quickly and accurately, helping maintain the right balance between usability and security in MDC3 environments.