A user needs to test several software replacement possibilities. Part of the process involves installing the different software options on a corporate-imaged sandboxed PC. Which of the following is…

Question

Options

• AMake the user a member of Domain Admins.
• BAdd the user to the local Administrators group.
• CLet the user use credentials from another user who has rights.
• DGive the user the local, high-privileged account password.

• A
  7% (3)
• B
  82% (36)
• C
  2% (1)
• D
  9% (4)

Explanation

Adding the user to the local Administrators group on the sandboxed PC grants them the necessary privileges to install software on that specific machine only, without giving them excessive permissions across the entire network or domain. This follows the principle of least privilege. Option A (making the user a Domain Admin) grants far-reaching domain-wide administrative rights - a serious security risk for a temporary software testing task. Option C (letting the user use another user's credentials) is a security violation and violates accountability/auditing principles. Option D (giving the user the local high-privileged account password) shares a shared credential, violating individual accountability and creating a security risk if the password is misused or not changed afterward.

No community discussion yet for this question.