CompTIA Security+ Exam Prep

Answer: B - Least privilege is the term for a process to have no more privileges than necessary to be able to fulfill its functions. Once resources and processes are isolated properly, least privilege needs to been forced. Only processes that need to carry out critical system functions should be allowed to run and other less privileged processes should call upon the more privileged processes to carry out these types of activities when necessary. This type of indirect activity protects the system from poorly-written or misbehaving code Processes should possess a level of privilege only as long as they really need it.