Tools / Zero Trust Architecture (ZTA) Interview questions
Define "least privilege access" in the context of Zero Trust?
Least privilege access means granting a subject, whether a user, service, or device, only the minimum permissions required to complete a specific task, for only as long as that task requires it.
In practice this often means just-in-time access, where elevated permissions are granted temporarily and expire automatically, and just-enough access, where the scope is narrowed to a specific resource or action rather than a broad role.
The goal is to shrink the blast radius of any single compromised credential. If an attacker steals a token scoped to one read-only API call, they cannot pivot to the rest of the environment with it.
Least privilege access primarily aims to:
Just-in-time access refers to:
More Related questions...
