Which statements are true descriptions of need-to-know and least privilege?

Which statements are true descriptions of need-to-know and least privilege?

• A. Need-to-know restricts access to information essential for a role; least privilege grants only necessary rights.
• B. Need-to-know means everyone can access all information.
• C. Least privilege means giving broad access to avoid bottlenecks.
• D. They have no effect on insider threats.

Answer: (A)