What is a common risk when applying software installation restrictions via GPOs?

What is a common risk when applying software installation restrictions via GPOs?

• A. Users may bypass restrictions if they have local admin rights
• B. Restrictions may break network connectivity
• C. All software will become unavailable
• D. GPOs will disable security features

Answer: (A)

The policy test here is about what happens when you try to control software installation with GPOs. The strongest, most common risk is that users who have local administrator rights on their machines can bypass these restrictions. Local admins can elevate privileges, modify or disable the policy, or install software anyway by tweaking settings or running installers outside the enforced rules, effectively defeating the GPO-based controls. To reduce this risk, it’s important to limit local admin rights to trusted IT personnel, apply least-privilege principles, and use robust software restriction controls (like AppLocker) with strict deny rules and monitoring.

The policy test here is about what happens when you try to control software installation with GPOs. The strongest, most common risk is that users who have local administrator rights on their machines can bypass these restrictions. Local admins can elevate privileges, modify or disable the policy, or install software anyway by tweaking settings or running installers outside the enforced rules, effectively defeating the GPO-based controls.

To reduce this risk, it’s important to limit local admin rights to trusted IT personnel, apply least-privilege principles, and use robust software restriction controls (like AppLocker) with strict deny rules and monitoring.