Which statement best reflects the principle of least privilege in Intercom Plus?

Which statement best reflects the principle of least privilege in Intercom Plus?

• A. Access is restricted to the minimum necessary to perform job duties and is reviewed periodically
• B. Access is granted to all employees
• C. Access is granted by random selection
• D. Access is granted based on tenure

Answer: (A)

The idea being tested is granting only what a person needs to do their job and keeping those permissions under review. This minimizes the chance that someone can access data or features unnecessary for their role, reducing risk if credentials are compromised and making audits simpler. In Intercom Plus, this means permissions are limited to the minimum required for current duties and are checked periodically, so as roles change, access can be adjusted accordingly. Why this fits best: giving everyone access, selecting users at random, or granting access based on how long someone has been with the company ignores actual job needs and can expose sensitive information or tools to people who don’t need them. The principle emphasizes purpose-driven access and regular review to maintain the right level of permission.

The idea being tested is granting only what a person needs to do their job and keeping those permissions under review. This minimizes the chance that someone can access data or features unnecessary for their role, reducing risk if credentials are compromised and making audits simpler. In Intercom Plus, this means permissions are limited to the minimum required for current duties and are checked periodically, so as roles change, access can be adjusted accordingly.

Why this fits best: giving everyone access, selecting users at random, or granting access based on how long someone has been with the company ignores actual job needs and can expose sensitive information or tools to people who don’t need them. The principle emphasizes purpose-driven access and regular review to maintain the right level of permission.