Of the following rules, which is less likely to support the concept of least privilege?

A.
The number of administrative accounts should be kept to a minimum.

B.
Administrators should use regular accounts when performing routine operations, such as reading e-mail.

C.
Tools that are likely to be used by hackers should have passwords that are as restrictive as possible.

D.
Only data to and from critical systems and applications should be allowed through the firewall.

Explanation:
Least privilege is a basic tenet of computer security that means users
should be given only those rights required to do their jobs.