Which statement best describes enforcing the principle of least privilege in an enterprise architecture?

• A. Users and systems receive all privileges to perform duties.
• B. Users and systems receive only the minimal access rights necessary to perform their duties, enforced via role-based access control, ABAC, and least-privilege assignment in all layers.
• C. Access rights are assigned randomly.
• D. Privileges are granted for fixed periods regardless of need.

Answer: (B)