$52.$

Which scenario meets the intent of PCI DSS

requirements for assigning users access to

cardholder details?

O Access is assigned to all users based on the access needs of the

least$-$privilege user in the company

O Access is assigned to individual users based on copying the

profile of a senior member

$0$ Access is assigned to individual users based on the least

privilege needed to perform their job

O Access is assigned to a group of users based on the privilege of

the most senior user in the group