CompTIA Security+ (SY0-501) — Question 230

The IT department needs to prevent users from installing untested applications.
Which of the following would provide the BEST solution?

Answer options

• A. Job rotation
• B. Least privilege
• C. Account lockout
• D. Antivirus

Correct answer: B

Explanation

The correct answer is B, as implementing least privilege ensures that users have only the access necessary to perform their tasks, thereby preventing them from installing untested applications. Job rotation (A) does not directly limit application installation, account lockout (C) is related to security breaches, and antivirus (D) protects against malware but does not restrict user permissions.