A company gives users adequate data access permissions to allow them to fulfill their duties...

This question pertains to theData Governancedomain, focusing on data security and access control principles. The company restricts access to the minimum needed for duties, which aligns with a specific security concept.

Active Directory (Option A): Active Directory is a tool for managing users and permissions, not a concept.

Hierarchical access (Option B): Hierarchical access implies access based on roles in a hierarchy, but it doesn’t specifically focus on minimal access.

Zero Trust (Option C): Zero Trust requires continuous verification for all access, which is broader than just minimal permissions.

Least privilege (Option D): Least privilege ensures users have only the permissions necessary for their duties, which matches the scenario.

The DA0-002 Data Governance domain includes "data privacy concepts," and least privilege is afundamental principle for secure access control.