The primary reason to limit local admin privileges on endpoints is thatlocal admin accounts have elevated privilegeswhich, if compromised, can be exploited to:
* Escalate Privileges:Attackers can move laterally or gain deeper access.
* Install Malware:Direct access to system settings and software installation.
* Modify Security Configurations:Disable antivirus or firewalls.
* Persistence:Create backdoor accounts for future access.
Incorrect Options:
* A. Installing unapproved software:A consequence, but not the most critical reason.
* C. Increased administrative work:Not a security issue.
* D. Making unauthorized changes:Similar to A, but less significant than privilege exploitation.
Exact Extract from CCOA Official Review Manual, 1st Edition:
Refer to Chapter 4, Section "Privilege Management," Subsection "Risks of Excessive Privileges" - Limiting admin rights reduces attack surface and potential exploitation.