問題文
An engineer must explain the difference between separation of duties and least privilege to a team designing a data export feature. Which pairing is correct?
選択肢
- Least privilege limits how much any one person can reach; separation of duties ensures no single person can complete a sensitive action alone.
- Separation of duties applies only to financial processes, so the export feature needs least privilege alone and the design can let one engineer both approve and run an export.
- Minimal privilege ensures that no single person can complete a sensitive action alone because each person holds only part of what the action requires, and separation of duties limits how much any one person can reach by assigning each duty its own scope, which means the two principles are the same requirement stated from the perspective of the action and of the person respectively.
- Both mean the same thing, because reducing privileges automatically splits duties, so a team that has applied one of them has nothing left to design for the other.