A security administrator notices that a specific network administrator is making unauthorized
changes to the firewall every Saturday morning. Which of the following would be used to mitigate
this issue so that only security administrators can make changes to the firewall?

A.
Mandatory vacations

B.
Job rotation

C.
Least privilege

D.
Time of day restrictions

Explanation:
A least privilege policy is to give users only the permissions that they need to do their work and no
more. That is only allowing security administrators to be able to make changes to the firewall by
practicing the least privilege principle.