Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

A user can view a paycheck in the payroll app but cannot modify it. What principle does this illustrate?

1. Separation of duties

2. Auditability

3. Least privilege

4. Defense in depth

The correct answer is: Least privilege

The scenario where a user can view a paycheck in the payroll application but cannot modify it illustrates the principle of least privilege. This principle dictates that users should be granted only those access rights they need to perform their job functions. By allowing the user to view their paycheck but restricting modification capabilities, the organization protects sensitive data from unauthorized changes and ensures that users only have permissions necessary for their role. This minimizes the risk of accidental or malicious data alterations and helps maintain data integrity, which is a critical aspect of cybersecurity practices. In contrast, the other principles mentioned do not specifically address this scenario's focus on restricting access based on user roles. Separation of duties involves spreading responsibilities to reduce risk, auditability pertains to tracking actions for reviewing and compliance purposes, and defense in depth refers to using multiple layers of security to protect information. None of these directly relates to controlling user permissions in the manner described.