Which of the following is an example of least privilege?

A.
An operator cannot generate and verify transactions alone.

B.
An operator does not have more system rights than the minimum required to do the job.

C.
An operator does not know more about the system than the minimum required to do the job.

D.
The operators’ duties are frequently rotated.

Explanation:
Least Privilege embodies the concept that users or operators should be granted the lowest level of
system access or system rights that allows them to perform their job. * Answer “An operator does
not know more about the system than the minimum required to do the job” is need-to-know * “The
operators’ duties are frequently rotated” is job rotation * “An operator cannot generate and verify
transactions alone” is separation of duties.