A Windows server hosting financial applications was compromised when a local account...
Nopal Securities technical mcq question, verified with a worked answer. Free to practise - no sign-up.
A Windows server hosting financial applications was compromised when a local account escalated privileges by exploiting a third-party app. What is the most strategic step to prevent similar incidents?
Show answer & explanation
Answer: A. Implement Just-In-Time (JIT) administration and restrict privileged actions
Just-In-Time (JIT) privileged access management eliminates standing administrator privileges, preventing local exploit escalation.
Step-by-step Derivation:
Step 1: Standing admin privileges provide attackers with immediate full access upon compromise.
Step 2: JIT administration grants temporal, granular elevation only when needed, minimizing the attack surface.