The correct answer is B. Least privilege. Here's why:
* Context of the Question: The organization wants to ensure that users are granted only the permissions required for their job responsibilities, aligning with a specific security principle.
* Google Cloud Product Relevance:
* The Least Privilege principle is a fundamental security concept that dictates that users should be given the minimum level of access-or permissions-necessary to perform their job functions.
This reduces the risk of unauthorized access and potential security breaches.
* In Google Cloud, Identity and Access Management (IAM) can be used to implement the least privilege principle by assigning roles and permissions that are tightly scoped to users' specific responsibilities.
* Why Not Other Options:
* A. Security by default: This is a general security approach where security settings are enabled by default, but it does not specifically address access control.
* C. Zero-trust: Zero-trust is a broader security model that assumes no implicit trust within a network; it complements but does not replace the least privilege approach.
* D. Cyber resilience: This refers to an organization's ability to continue operations during a cyber incident, which is different from granting minimal permissions.
Google Cloud Digital Leader References:
* Refer to Google Cloud IAM documentation for more information on implementing the principle of least privilege in Google Cloud.