Which of the following is the MOST important reason to limit the number of users with local admin privileges on endpoints?

The primary reason to limit local admin privileges on endpoints is that local admin accounts have

elevated privileges which, if compromised, can be exploited to:

Escalate Privileges: Attackers can move laterally or gain deeper access.

Install Malware: Direct access to system settings and software installation.

Modify Security Configurations: Disable antivirus or firewalls.

Persistence: Create backdoor accounts for future access.

Incorrect Options:

A . Installing unapproved software: A consequence, but not the most critical reason.

C . Increased administrative work: Not a security issue.

D . Making unauthorized changes: Similar to A, but less significant than privilege exploitation.

Exact Extract from CCOA Official Review Manual, 1st Edition:

Refer to Chapter 4, Section "Privilege Management," Subsection "Risks of Excessive Privileges" -

Limiting admin rights reduces attack surface and potential exploitation.