Your organization asks you to design a web-based application. It wants you to design the application so that it runs under a security context that allows only those privileges required for the application to run to minimize risk if an attack occurs. Which of the following security concepts does this describe?
A. Implicit deny
B. Mandatory access control
C. Separation of duties
D. Principle of least privilege
Answer: D