How would you answer an interview scenario involving least privilege?

In an interview, I would first define least privilege and the problem it solves, then explain how I would scope identities per workload, separate read and write permissions, use short-lived credentials, review privileges regularly, remove unused access, and require elevation for exceptional administrative actions. I would also call out the main failure mode: using one highly privileged shared service account for convenience turns a compromise in any caller into broad system access. Finally, I would describe how I would test, monitor, and safely roll back or recover the solution.