Exam CISSP topic 1 question 73 discussion

he correct answer is A. Use least privilege at each level to restrict access. Least privilege is a principle in information security that states that users should only be granted the minimum level of access necessary to perform their job functions. Applying least privilege to file system access means granting permissions and privileges to users and groups based on their specific needs and roles, and no more. This helps prevent unauthorized access and limits the potential damage that can be caused by compromised accounts. By implementing least privilege, access to the file system is limited to only those users who require it for their job responsibilities. This approach reduces the risk of accidental or intentional misuse of the file system and helps protect sensitive data and system resources.

Least priviliage is a principle in information security not a menthod to restric access on file system. only way is to create a user group such as read, write or execute i.e. applicable to a file system of OS.

A. https://learn.microsoft.com/en-us/windows-hardware/drivers/ifs/privileges

Thiking about NTFS and It's ACE/ACL capabilities

A is correct.