sc-900 Practice Question 1766
Exam: sc-900
Domain: Describe the concepts of security, compliance, and identity
Topic: Describe security concepts
Difficulty: medium
During a recent security assessment, you identified a potential threat to Contoso Ltd's hybrid cloud environment. The threat involves an insider who has access to sensitive data but could potentially misuse this access. What is the best approach to mitigate this risk while maintaining operational efficiency?
Answer Options
A
Removing all user access to sensitive data
B
Implementing least privilege and role-based access controls
C
Increasing the frequency of security audits and monitoring
D
Training all employees on security best practices
Correct Answer
B: Implementing least privilege and role-based access controls
Explanation
The correct answer is B. Implementing least privilege and role-based access controls ensures that users have only the necessary permissions to perform their jobs, reducing the risk of misuse. Option A is incorrect as it suggests removing all user access, which would not be practical for operational efficiency. Option C is incorrect because it focuses on monitoring after the fact, which does not prevent the initial misuse. Option D is incorrect as it does not address the root cause of the risk by controlling access levels.