What are the principles of least privilege and defense-in-depth, and how do they contribute to cybersecurity?

Least privilege restricts user access to only the necessary resources or privileges required to perform tasks, minimizing the potential impact of security breaches. Defense-in-depth involves implementing multiple layers of security controls to protect against various attack vectors and mitigate security risks.