Enforcing the principle of least privilege is the practice of granting users and systems the minimum level of access necessary to perform their tasks. By limiting root or core access and restricting the creation of deployments to only those who absolutely need it, the risk of unauthorized access, misuse, or damage is minimized. This helps ensure that critical systems and sensitive data are protected by reducing the number of people or services with high-level access.
Trust and verify on demand is not a standard security practice and could create security gaps. Disabling multi- factor authentication is a poor security practice, as multi-factor authentication (MFA) enhances security by adding an additional layer of verification. Deploying applications with full access) contradicts the principle of least privilege and could expose the system to unnecessary risks.

PBAC enables highly specific access control based on multiple attributes, enhancing flexibility and security in cloud environments. Reference: [CCSK v5 Curriculum, Domain 5 - IAM][16†source].