Exam SSCP topic 1 question 21 discussion

The content is salaries, so if it were content dependent the manager would not see any salaries. Least privilege would allow the manger to see things in his department while blocking other department information.

A is the correct answer, because the question is asking about an action control mechanism (read, tool or method to execute a principal) NOT a principal or accepted ideology preference. In this case, "least privilege" could be argued for all these access controls, but A is the best fit answer to this scenario purely on how this is worded. Keep that in mind when taking the exam, good luck!

The answer is C. The manager has the least amount of access needed to do their job.

Correct answer is A

CDAC is a subset of database views which falls under the principle of least privilege. The principle of least privilege gives the subject as little control and access as possible while being able to efficiently execute work.