A Chief Information Security Officer wants to lock down the users' ability to change applications that are installed on their Windows systems. Which of the following is the best enterprise-level…

The correct answer is B. GPO. Group Policy Objects (GPO) are a feature in Windows environments that allow administrators to control settings and permissions across user accounts and computers within an organization. GPOs can restrict user permissions to prevent unauthorized installation or modification of…

Submitted by carter_n· Mar 6, 2026Security operations

Question

A Chief Information Security Officer wants to lock down the users' ability to change applications that are installed on their Windows systems. Which of the following is the best enterprise-level solution?

Options

AHIPS
BGPO
CRegistry
DDLP

How the community answered

(28 responses)

A
7% (2)
B
71% (20)
C
4% (1)
D
18% (5)

Explanation

Group Policy Objects (GPO) are a feature in Windows environments that allow administrators to control settings and permissions across user accounts and computers within an organization. GPOs can restrict user permissions to prevent unauthorized installation or modification of applications, making them the best choice for centrally managing user capabilities on Windows

Topics

#Group Policy Objects#endpoint security#access control#system hardening

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice