Which Principle Is at Work?

About this interactive

The lesson's principles: - **Segmentation:** divide the network so each department has its own network and resources, like rooms with their own keys. - **Least privilege:** give each person the least access their job needs, so a mistake or a stolen account exposes as little as possible. - **Role-based access control:** grant access to roles, then put people in roles; a new hire or a move is just a change of group. - **Separation of duties:** no one person runs a whole process, such as raising, approving and paying a purchase. - **Encryption at rest:** stored data is encrypted. **Encryption in transit:** data is encrypted while it moves. The lesson also covers AAA, monitoring, backups, hardening and patching.

What you'll learn

Identify the security principle a measure applies: segmentation, least privilege, role-based access control, separation of duties, encryption at rest or encryption in transit
Tell least privilege (how little each person gets) from role-based access control (granting access through roles), and encryption at rest from encryption in transit

Aligned to

CompTIA Network+

4.1 Explain the importance of basic network security concepts.

Cisco CCST Cybersecurity

1.1 Define essential security principles.

1.4 Explain encryption methods and applications.

Key terms

Network Segmentation: The practice of dividing a network into smaller segments to improve performance and limit the spread of security threats.
Least Privilege: A security principle that grants users and systems only the minimum access rights needed to perform their functions.
Role-Based Access Control: An access control model that assigns permissions based on a user's role within an organization.
Separation of Duties: Separation of Duties is a security control principle requiring that critical or sensitive tasks be divided among multiple individuals to prevent fraud, collusion, and unauthorized actions by any single person.
Encryption at Rest: The protection of stored data by encrypting it so it cannot be read without the appropriate decryption key.
Encryption in Transit: The protection of data as it moves across a network by encrypting it to prevent interception or tampering.

Topics

Security Principles Least Privilege Rbac Separation Of Duties Encryption Segmentation Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →