312-50V9 · Question #81
What is the best defense against privilege escalation vulnerability?
The correct answer is C. Run services with least privileged accounts and implement multi-factor authentication and. The most effective defense against privilege escalation combines running services under least-privileged accounts with multi-factor authentication to limit the impact and opportunity of an escalation attack.
Question
What is the best defense against privilege escalation vulnerability?
Options
- APatch systems regularly and upgrade interactive login privileges at the system administrator level.
- BRun administrator and applications on least privileges and use a content registry for tracking.
- CRun services with least privileged accounts and implement multi-factor authentication and
- DReview user roles and administrator privileges for maximum utilization of automation services.
How the community answered
(22 responses)- B5% (1)
- C95% (21)
Why each option
The most effective defense against privilege escalation combines running services under least-privileged accounts with multi-factor authentication to limit the impact and opportunity of an escalation attack.
Patching systems is important but 'upgrading interactive login privileges at the system administrator level' actually increases privilege exposure rather than reducing it.
While least privileges is partially correct, a 'content registry for tracking' is not a recognized security control against privilege escalation and does not address authentication weaknesses.
Running services and processes under least-privileged accounts limits the damage an attacker can cause if a service is compromised, because the compromised process has only minimal permissions. Adding multi-factor authentication raises the bar for an attacker attempting to escalate privileges by requiring additional verification beyond a stolen credential.
Reviewing roles for 'maximum utilization of automation services' is an operational efficiency goal, not a security hardening strategy, and does not reduce privilege escalation risk.
Concept tested: Privilege escalation mitigation using least privilege and MFA
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implementing-least-privilege-administrative-models
Topics
Community Discussion
No community discussion yet for this question.