Certiport Network Security Practice Exam

Sharing the folder titled "Facebook Photos" with read-share permission aligns perfectly with the principle of least privilege. This principle states that users should have the minimum levels of access – or permissions – they need to perform their job functions. By providing read-share permission, you ensure that users can view and access the photos without being able to modify, delete, or alter any of the contents within the folder. This reduces the risk of accidental changes or malicious actions by limiting the interaction that users have with the folder's contents.

Using modification permission would not adhere to the principle of least privilege, as it allows users the capability to change the folder's contents, which is unnecessary for merely viewing photos. Granting full control would exceed what is needed and poses a greater risk, as it lets users alter folder settings and delete files. Setting the folder to public access opens it to anyone, which circumvents the principle of least privilege altogether by greatly expanding access beyond intended recipients.