Which of the following security concepts establishes the notion that a user should only be given
sufficient access to the resources they need to perform their job function?

A.
Deny all

B.
Allow all

C.
Most privilege

D.
Least privilege

Explanation:
http://www.cs.cornell.edu/fbs/publications/leastPrivNeedham.pdf