CompTIA Server+ (SK0-005)Server AdministrationMedium
A server administrator is setting up a new server that will host several critical applications. The security team has mandated that all server builds must adhere to the principle of least privilege. Which of the following server administration practices BEST aligns with this mandate?
- AConfiguring service accounts with only the necessary permissions for their specific functions.
- BInstalling all available server roles and features to ensure future flexibility.
- CDisabling the server's firewall to avoid potential application conflicts.
- DUsing a single 'administrator' account for all server management tasks.
Show answer & explanationAnswer & explanation
Correct answer: A. Configuring service accounts with only the necessary permissions for their specific functions.
The principle of least privilege dictates that users and services should only be granted the minimum permissions required to perform their specific tasks. Configuring service accounts with only necessary permissions directly implements this principle.
Why the other options are wrong
- B. Installing unnecessary roles and features increases the attack surface and violates the principle of least functionality, which is related to least privilege.
- C. Disabling the firewall significantly weakens the server's security posture and has no relation to the principle of least privilege; it's a security anti-pattern.
- D. Using a single 'administrator' account for all tasks grants excessive privileges and makes auditing difficult, directly violating the principle of least privilege.
Principle of Least Privilege (PoLP)
A security principle requiring that every user, program, or process be granted only the minimum set of permissions necessary to perform its function, and no more.
- Reduces the attack surface and potential damage from compromised accounts.
- Applies to user accounts, service accounts, and system processes.
- Requires careful planning and regular review of permissions.
Memory trick: Fewest Permissions Protect Systems Effectively.