nerdexam
(ISC)2

SSCP · Question #1091

One method that can reduce exposure to malicious code is to run applications as generic accounts with little or no privileges.

The correct answer is A. True. Running applications with limited user privileges is a critical security measure that minimizes the potential damage if the application becomes compromised by malicious code.

Submitted by skyler.x· Apr 18, 2026Access Controls

Question

One method that can reduce exposure to malicious code is to run applications as generic accounts with little or no privileges.

Options

  • ATrue
  • BFalse

How the community answered

(20 responses)
  • A
    95% (19)
  • B
    5% (1)

Why each option

Running applications with limited user privileges is a critical security measure that minimizes the potential damage if the application becomes compromised by malicious code.

ATrueCorrect

This statement is true because operating applications with accounts that possess only the necessary minimum privileges (principle of least privilege) significantly restricts what malicious code can do if it exploits that application. This limits its ability to spread, modify system files, or access sensitive data beyond the application's confined scope.

BFalse

This statement is false, as restricting application privileges is a widely accepted and highly effective security best practice to contain the impact of security breaches.

Concept tested: Principle of Least Privilege

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implement-least-privilege

Topics

#Least Privilege#Application Security#User Accounts#Malware Prevention

Community Discussion

No community discussion yet for this question.

Full SSCP Practice