MENU
Once an intruder has gained access to a remote system with a valid username and password, the attacker will attempt to increase his privileges by escalating the used account to one that has increased privileges. such as that of an administrator. What would be the best countermeasure to protect against escalation of priveges?
Suggested Answer: B
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
With less privileges it is harder to increase the privileges.
13 comments · newest first
FR
France
12 months ago
B is the best option, no doubt about it!
JI
Jina
12 months ago
Not sure if a strong policy is enough, honestly.
MA
Marica
1 year ago
Two passwords? That sounds confusing!
LO
Loreta
1 year ago
I think A could help too, but not as much.
RE
Renay
1 year ago
Definitely B, least privileges is key!
SH
Sharan
1 year ago
I recall something about strong policy documents being important, but I don't think they directly prevent privilege escalation like the least privilege does.
EL
Elli
1 year ago
I practiced a similar question about privilege escalation, and I think the best approach is to limit user permissions as much as possible. So, B seems right.
CL
Claribel
1 year ago
I'm not entirely sure, but I feel like giving users two passwords could add some security. Maybe that's option C?
WA
Wade
1 year ago
I remember discussing the principle of least privilege in class, so I think option B makes the most sense.
BA
Barney
1 year ago
Okay, let's think this through. Resource elasticity means the ability to dynamically add or remove resources as needed. So the two correct answers are probably B and D, which mention deploying VMs and adding VMs when traffic is high.
MY
Myong
1 year ago
Okay, let's see. We need to enable remote access to OneDrive for Business, and the company is using Windows 10 devices with Autopilot. I'm thinking option C, enrolling the devices in Intune, might be the way to go. That would give us centralized device management and control.
OL
Ollie
1 year ago
This question seems pretty straightforward. I'm confident I can figure out the false statement about Intrusion Detection Systems.
ST
Staci
1 year ago
Hmm, I'm a bit confused by this question. Is a pipeline lookup transformation related to a lookup associated with a source like JMS or SAP? I'll have to review my notes on different types of lookups to figure this out.