Which statement best describes the principle of least privilege?Which statement best describes the principle of least privilege?

Checking a packets permissions against an access control list

$.$Adding an IAM user into at least one IAM group

$.$Performing a denial of service attack that originates from at least one device.

Granting only the permissions that are needed to perform specific tasks.