Which statement best describes least privilege in information security?

Which statement best describes least privilege in information security?

• A. It limits access to the minimum necessary for a user’s role.
• B. It allows broad access to all data for convenience.
• C. It eliminates the need for encryption.
• D. It replaces the need for audits.

Answer: (A)