Which of these is a way of making applications less vulnerable to hacking?

make Deny the default

make Allow the default

apply the principle of greatest privilege

have a single point of defense