Which Security Technique Limits Admin Console Access to Specific Staff?

SY0-701 By islever Editorial Last updated

Short answer

D Least privilege

Question

An IT manager informs the entire help desk staff that only the IT manager and the help desk lead will have access to the administrator console of the help desk software. Which of the following security techniques is the IT manager setting up?
  1. Hardening
  2. Employee monitoring
  3. Configuration enforcement
  4. Least privilege Correct Answer

Key Takeaways

This question tests the principle of least privilege and the trap is confusing it with hardening, which focuses on reducing attack surfaces rather than limiting user access.

Restricting administrator console access to only the IT manager and help desk lead exemplifies least privilege. The community unanimously confirms that limiting access to those who need it for their job is the core of least privilege.

Common mistake: Choosing Hardening: Hardening involves securing a system by reducing its attack surface (e.g., disabling unnecessary services), not by restricting specific users' access rights.

Expert Analysis

Why the Answer Is Correct

D. Least privilege is the security principle that grants users only the access necessary to perform their job functions. By limiting admin console access to the IT manager and help desk lead, the organization is directly applying least privilege to reduce risk of unauthorized changes or data exposure.

Why the Other Options Are Wrong

A. Hardening focuses on system configuration to eliminate vulnerabilities (e.g., patching, disabling ports) — it is not about assigning user permissions. B. Employee monitoring tracks user activity, not access restriction. C. Configuration enforcement ensures systems remain compliant with a defined baseline, which is broader than simple user access control.

Community Comment Notes

Commenters emphasize that "access is the key word" and that "eliminating unnecessary access = least privilege." The most-liked comment spells out the definition of least privilege and applies it directly to the scenario, confirming the answer without ambiguity.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When you see a scenario about restricting access to a system, data, or console based on job role, always consider least privilege first. Look for keywords like 'only', 'need-to-know', or 'necessary for their duties' — those point directly to least privilege, not hardening or monitoring.

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. metzen227 👍 13
    Least privilege: Least privilege is a security principle that states that users should only be granted the minimum level of access or permissions necessary to perform their job functions. By restricting access to the administrator console of the help desk software to only the IT manager and the help desk lead, the IT manager is adhering to the principle of least privilege, ensuring that only those individuals who require administrative access have it, thereby reducing the risk of unauthorized access and potential misuse. Given the scenario described, the security technique that the IT manager is setting up by restricting access to the administrator console of the help desk software is Least privilege. This approach aligns with the principle of least privilege by granting administrative access only to individuals who need it to perform their job responsibilities.
  2. 1LL337 👍 5 Answered D
    Eliminating unnecessary access = Least Privilege
  3. Limah 👍 3
    Access is the key word here
  4. gollum9 👍 1 Answered D
    D. Least privilege

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide