ITPEC FE Subject A April 2025 Question 28
ITPEC FE Subject A April 2025 — Question 28 of 60
Principle of Least Privilege (database access rights) — grant only the minimum permissions an application actually needs.
The application only retrieves and displays data → it only needs SELECT. Per the given definitions, Reference right = select a record.
Why not others:
- (a) Administrator right — allows DDL operations (create, alter, drop tables); far exceeds what a read-only app needs
- (c) Update right — allows insert, update, and delete of records; the app does not modify data
- (d) Update right and reference right — includes unnecessary update permissions, violating least privilege
Key rule: always assign the minimum access rights required for the application's actual functions — this is the principle of least privilege.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.