Free Isaca CCOA Actual Exam Questions - Question 7 Discussion

B. While unauthorized changes (D) and installing unapproved software (A) are valid concerns, the key issue is that local admin rights provide a powerful foothold for attackers if compromised. Limiting those users reduces the risk that an attacker can easily escalate privileges and control the whole endpoint, which is a much bigger problem than just accidental user errors or extra admin overhead (C).

D imo, unauthorized changes can cause serious system instability or security gaps. While B is about external threats, preventing internal damage from careless or malicious insiders is just as crucial.

Guessing B here too, since local admin rights can be a huge target for attackers to take over the whole system, which seems riskier than just users messing things up themselves.

A/B? While B is about external threats, A highlights how local admins can cause harm by installing risky software themselves. Limiting users helps reduce both insider mistakes and attack surfaces.

It’s not just about the risk of users installing software or making changes themselves, which covers A and D. The real deal is that local admin accounts provide a way for attackers to gain high-level access if those accounts are compromised, which is way more dangerous. So B stands out because it highlights the bigger threat from external exploitation rather than just internal mistakes or management hassles like in C.

It’s B because admin privileges open the door wide for hackers to escalate attacks quickly.

D imo, unauthorized changes can lead to system instability and data loss, which is a big risk on its own. It’s not just about security but also maintaining system integrity.

It’s B, since admin rights can be directly exploited by hackers to take over systems.

A imo, since unapproved software can introduce vulnerabilities or malware directly.

It’s B because admin rights let attackers do way more harm if compromised.

B seems like the best choice since threat actors can really cause damage if they get access to local admin privileges.