How do you defend against Privilege Escalation?
Suggested Answer: A, B, C, E
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
HU
Hubert
12 months ago
Encryption is important, but it won't stop privilege escalation directly.
AL
Alfred
12 months ago
Least privilege principle is a must for all users and apps.
RI
Rickie
1 year ago
Wait, allowing IE security settings to zero? That sounds risky!
PH
Phyliss
1 year ago
Definitely agree with running services as unprivileged accounts.
DO
Domingo
1 year ago
Restricting interactive logon privileges is key!
LE
Lezlie
1 year ago
I feel like using encryption is more about protecting data rather than directly preventing privilege escalation. I’m leaning towards option E.
CA
Candra
1 year ago
I’m a bit confused about the least privilege principle. Does that mean we should always run users and applications with minimal permissions?
LO
Louis
1 year ago
I remember practicing a question about running services as unprivileged accounts. That seems like a solid defense against privilege escalation.
EL
Eliseo
1 year ago
I think restricting interactive logon privileges is important, but I’m not entirely sure if it’s the best answer for privilege escalation.
CO
Corrie
1 year ago
Hmm, I'm a bit confused. The question mentions a right of return, so I'm not sure if I should recognize any revenue at all. Maybe option B, where I don't recognize any revenue, is the safer choice? I'll need to double-check the accounting standards on this.
LE
Leslee
1 year ago
Hmm, I'm a bit unsure about this one. I know Amazon RDS supports Oracle, but I can't quite recall the specific licensing options. I'll have to think this through carefully.
CA
Cammy
1 year ago
I'm a bit confused by the differences between options A, B, and C. They all seem to involve analyzing the business units' patterns of usage and adjusting services accordingly. I'll need to closely compare the details of each option to determine which one is truly the best solution.
GA
Gary
1 year ago
Okay, let me think this through. The pre-engagement collateral should include information to help the client understand the scope and process, so I'm leaning towards B. The scoping guide seems like the most logical choice here.
TW
Twana
1 year ago
If the property is let-out, the deduction is the actual interest paid, not the cap.