CompTIA CASP+ (CAS-004) — Question 534

A company has decided that only administrators are permitted to use PowerShell on their Windows computers. Which of the following is the BEST way for an administrator to implement this decision?

Answer options

• A. Monitor the Application and Services Logs group within Windows Event Log.
• B. Uninstall PowerShell from all workstations.
• C. Configure user settings In Group Policy.
• D. Provide user education and training.
• E. Block PowerShell via HIDS.

Correct answer: C

Explanation

The correct answer is C, as configuring user settings in Group Policy allows the administrator to enforce the restriction on PowerShell usage effectively across all users. Options A and E are more reactive measures and do not directly prevent access, while option B would be impractical for many organizations, and option D, while helpful, does not enforce the rule technically.