A security administrator notices that a specific network administrator is making unauthorized changes to the
firewall every Saturday morning. Which of the following would be used to mitigate this issue so that only security
administrators can make changes to the firewall?

A.
Mandatory vacations

B.
Job rotation

C.
Least privilege

D.
Time of day restrictions

Explanation:
A least privilege policy is to give users only the permissions that they need to do their work and no more. That is
only allowing security administrators to be able to make changes to the firewall by practicing the least privilege
principle.