Instead of giving a security administrator full administrative rights on the network, the administrator
is given rights only to review logs and update security related network devices. Additional rights
are handed out to network administrators for the areas that fall within their job description. Which
of the following describes this form of access control?

A.
Mandatory vacation

B.
Least privilege

C.
Discretionary

D.
Job rotation

Explanation: