Match the descriptions to these access control principles terms: Authentication, Authorization, Least privilege, Defense in depth.

Access control principlesConcept relationships

Choose a match for every item. Use each answer once.

Limiting permissions reduces the damage possible from mistakes or a compromised identity.

Authorization must be enforced at the protected resource or operation boundary.

Multiple layers can limit damage when one protection fails or is bypassed.

Authentication verifies who is making a request rather than deciding every action they may take.