A company has 5 users. Users 1, 2 and 3 need access to payroll and users 3, 4 and 5 need
access to sales. Which of the following should be implemented to give the appropriate access
while enforcing least privilege?

A.
Assign individual permissions to users 1 and 2 for payroll. Assign individual permissions to
users 4 and 5 for sales. Make user 3 an administrator.

B.
Make all users administrators and then restrict users 1 and 2 from sales. Then restrict users 4
and 5 from payroll.

C.
Create two additional generic accounts, one for payroll and one for sales that users utilize.

D.
Create a sales group with users 3, 4 and 5. Create a payroll group with users 1, 2 and 3.