Study. uk . com
  1. Home
  2. All questions
  3. Question 216

CompTIA Security+ study material · question 216 of 611

Which control requires that a system provide only the capabilities it needs, with unnecessary ports, protocols and services disabled?

  1. Separation of duties
  2. Least privilege
  3. Information flow enforcement
  4. Least functionality
Show the answer

Answer: D. Least functionality

Least privilege limits what accounts may do; least functionality limits what the system offers at all.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53r5 › CM-7 Least Functionality

Challenge yourself on this topic → Study as cards