Questão 1 — CompTIA SY0-701 CompTIA Security+ Certification Exam
A company is implementing a zero-trust security architecture for its cloud infrastructure. Security architects are evaluating different approaches to enforce least privilege access across microservices. Which of the following BEST describes the primary benefit of applying the principle of least privilege in this scenario?
- A. It eliminates the need for network segmentation and firewalls entirely.
- B. It minimizes the potential damage from compromised accounts or lateral movement by restricting each service and user to only the resources and permissions required for their specific function.
- C. It automatically detects and blocks all malware without requiring additional endpoint protection.
- D. It ensures all users receive the same level of access to increase operational efficiency.
Resposta correta:
B
Explicação
Explanation: Correct answer: B. It minimizes the potential damage from compromised accounts or lateral movement by restricting each service and user to only the resources and permissions required for their specific function. The principle of least privilege is foundational to zero-trust architecture and directly reduces the attack surface by ensuring users, services, and applications have only the minimum access necessary. In a microservices environment, this means each service can only communicate with and access the resources it needs, limiting lateral movement if one service is compromised. This significantly reduces the potential blast radius of a security incident. The incorrect options misrepresent how least privilege works: it does not eliminate other security controls (option A), it does not provide malware detection (option C), and it actually restricts rather than expands access (option D).
Quer todas as 907 questões por R$ 1,00?