Question

the idea of restricting both physical and file/server access to only those who need it is known as ______

options: social engineering, access control, principle of least privilege, site security

Explanation:

• social engineering: Refers to manipulating people to gain unauthorized access, not restricting access. Eliminate.
• access control: Focuses on managing who can access resources, but the description here emphasizes "only those who need it" which aligns more with the principle of least privilege.
• principle of least privilege: The concept of granting only the minimum access necessary (to those who need it) for physical and digital resources. This matches the description.
• site security: A broader term for securing a site, not specifically about restricting access to those who need it. Eliminate.

Answer:

C. principle of least privilege