medium
Single Answer
0Evaggelia is processing access control requests for her organization. She comes across a request where the user does have the required security clearance, but there is no business justification for the access. Evaggelia denies this request. What security principle is she following?
Answer Options
A
Need to know
B
Least privilege
C
Segregation of duties
D
Two-person control
Correct Answer: A
Explanation
Evaggelia is following the need to know principle. While the user may have the appropriate security clearance to access this information, there is no business justification provided, so Evaggelia does not know that the user has an appropriate need to know the information.