Integrated Defense Test 1 Practice

Controlling who can see information and what they can do with it is the essential idea here. Need-to-know means access to particular information is granted only to people who truly need it to perform their duties, not to everyone who might have a general interest. Least privilege means that once someone has access, they receive only the minimum permissions necessary to carry out their tasks, no more. Together, these principles reduce exposure and limit potential damage from mistakes, misuse, or malicious actions. The described statement captures this accurately: access to information is restricted to what a role requires, and permissions are kept to the minimum needed to perform the job. The other options don’t fit because they imply universal access, broad permissions, or no effect on insider threats, which contradict the purpose of need-to-know and least privilege. For example, in practice, a nurse would only access patient records needed for care, and a user account would avoid unnecessary admin rights.