correct answer - C

Answer C

The principle of least privilege should be applied to all administrator or otherwise privileged accounts on both IT and OT, in order to reduce the risk of privilege escalation. This control should be measured by ensuring that the principle is being applied when granting privileges and confirming that no accounts are designated as domain administrators. * Apply principle of least privilege to all administrator / privileged accounts * Privilege escalation Unauthorized access * No user account should always have administrator or super-user privileges. IT and OT assets NIST CSF: PR.AC ISA 62443-2- 14.3.3.7.3 ISA 62443-3-3 1 https://www.cisa.gov/sites/default/files/publications/Common_Baseline_v2_Controls_List_508c.pdf Page 4

It should be C

Answer C

shared accounts and passwords increase the likelihood of an unauthorized access

I agree its A - It escalates the privilege of some of the account users to the highest level required by any of the account multi-users. If someone is an approved user of a multi-user account, they have authorized access. But too much privilege.

clearly C