Drone exam · Security

A temporary pilot needs to fly one assigned aircraft but is given permission to delete logs and change organisation wide settings. What is wrong?

Answer

The account has more privilege than the task requires. Limit permissions to the aircraft, mission, and functions needed for the role.

Explanation

Least privilege reduces both malicious misuse and accidental changes.