Why least privilege applies to users, applications and services, how it limits the damage from a compromised account, and the one planned exception every cloud tenant needs. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight.

In this deep dive

• Least privilege: only the permissions an identity needs for its legitimate responsibilities
• Why a stolen ordinary account reaches a small area and a stolen admin account reaches almost everything
• Separate standard and admin accounts for administrators, and least privilege for applications and services
• People who move between roles and collect access, and why keeping old access is a least privilege failure
• Break-glass accounts: two cloud-only accounts, excluded from conditional access, protected with FIDO2 keys, alerting on any sign-in and tested on a schedule
• Microsoft's mandatory MFA for its admin portals, and why password-only emergency accounts no longer work there

This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight.

Links

• CompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)
• All of Chris Rees's Pluralsight courses
• Watch this lesson on YouTube
• Security+ study guides

Transcript and links: https://www.skillthropic.com/podcast/least-privilege-break-glass-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=least-privilege-break-glass-deep-dive

Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com