A project lead notices that a model builder still has permission to delete approval records after the model has gone live. Which principle has been violated?
Select an answer to reveal the explanation.
Short Explanation
If someone still has delete rights after they don't need them, that's a least-privilege problem. You scope access to what's needed right now, not what was needed during the build.
Full Explanation
Least privilege requires access to be scoped to current need; retaining delete permissions on approval records after the build phase ends is exactly the kind of lingering over-permissioning it is meant to prevent. The fairness option is incorrect because fairness concerns equitable outcomes across groups, not permission scope. The explainability option is incorrect because explainability concerns understanding model outputs, not access control. The robustness option is incorrect because robustness concerns performance under unusual inputs, not permissions. For the exam, recognise stale or excess access as a least-privilege issue even when it involves governance records rather than production systems.