The principle of least privilege means giving users and processes only the minimum access or permissions they need to perform their tasks. Defense in depth involves using multiple layers of security to protect a system. For example, in a web application, use role-based access control to limit user permissions and have multiple security mechanisms in place (firewalls, intrusion detection, encryption) to defend against attacks.
