Which technique helps mitigate insider threats?

Which technique helps mitigate insider threats?

• A. Least privilege
• B. Increased network perimeter
• C. Frequent password changes
• D. Public sharing of credentials

Answer: (A)

Limiting access to the minimum privileges needed for each user reduces the potential damage insiders can cause. When people only have the rights necessary for their role, even if an account is misused or compromised, there’s less data or systems exposed. This approach supports strong access controls, such as role-based access and regular reviews, and it makes unusual activity easier to detect because permissions are tightly scoped and change over time with roles. Increasing the network perimeter mainly helps against external threats and can be bypassed by insiders or compromised internal accounts, so it doesn’t specifically address insider risk. Frequent password changes don’t directly reduce what a person can do; they can be ineffective or burdensome if not paired with proper access controls. Public sharing of credentials is dangerous and greatly increases risk by removing accountability and enabling broader access.

Limiting access to the minimum privileges needed for each user reduces the potential damage insiders can cause. When people only have the rights necessary for their role, even if an account is misused or compromised, there’s less data or systems exposed. This approach supports strong access controls, such as role-based access and regular reviews, and it makes unusual activity easier to detect because permissions are tightly scoped and change over time with roles.

Increasing the network perimeter mainly helps against external threats and can be bypassed by insiders or compromised internal accounts, so it doesn’t specifically address insider risk. Frequent password changes don’t directly reduce what a person can do; they can be ineffective or burdensome if not paired with proper access controls. Public sharing of credentials is dangerous and greatly increases risk by removing accountability and enabling broader access.