Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Answer A makes most sense. MFA is not applicable to reducing the rate of attackers utilizing native Windows tools to bypass system controls and execute commands with privileged credentials. Native Windows tools can possibly be restricted, but disabling or removing them could cause OS to break. Implementing controls to block execution of untrusted applications sounds cool, but lets not forget these are "native Windows tools" - ie. already trusted!
User Account Control (UAC) is a Windows security feature that helps prevent unauthorized changes to the operating system. Setting UAC to the most restrictive level ensures that even native tools (like PowerShell, WMI, or Task Scheduler) require explicit approval before executing privileged actions. This directly targets the tactics used in privilege escalation, where adversaries exploit built-in tools to elevate access.
MFA may be the correct answer here. MFA defends WHO can act, thwarting credential-based escalation, whereas hardening defends WHAT can be exploited, shrinking exposure but leaving credential abuse largely untouched.