Which statement describes the primary consideration when approving a Trusted Agent?

• A. Operational needs
• B. Personal preference
• C. Random selection
• D. Market demand

Answer: (A)

Approving a Trusted Agent is all about ensuring access matches what is actually needed to perform legitimate operations. The primary consideration is operational needs—the specific tasks that must be done, the systems involved, and ensuring access is limited to only what is necessary to complete those tasks. This aligns with least privilege and need-to-know, and it supports accountability and secure, auditable actions.

Personal preference, random selection, or market demand don’t fit this approach because they don’t guarantee that the agent has a justified, required level of access or that there will be appropriate oversight. For instance, granting broad or unnecessary permissions simply because someone is available or in demand increases risk and makes monitoring harder. In contrast, tying approval to concrete operational needs means access is purpose-driven, time-bound, and can be reviewed and revoked when the task is done.

A concrete picture helps: if a contractor is brought in to manage secure backups, the approval should specify exactly which systems and data can be accessed, what actions are permitted, the duration of access, and how activity will be logged. This keeps operations running smoothly while maintaining security and control.