Examkin

Question

Difficulty: HardWindows Security Settings and User Account Control

A system administrator is configuring security baselines on standalone Windows 11 Pro workstations located in a shared laboratory environment. To enforce strict access controls and prevent standard domain users from triggering administrative privilege requests or running unauthorized installers, the administrator opens the Local Security Policy snap-in (secpol.msc). Which TWO User Account Control (UAC) policy settings should the administrator configure under Security Options? Select TWO.

  1. Set 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests'Answer
  2. Set 'User Account Control: Detect application installations and prompt for elevation' to 'Enabled'Answer
  3. C
    Configure Share Permissions on the C:\Windows folder to Deny Write access to the Users group
  4. D
    Use Computer Management (compmgmt.msc) under Task Scheduler to automatically terminate unassigned processes

Answer

The administrator should configure 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' and set 'User Account Control: Detect application installations and prompt for elevation' to 'Enabled'.
Configuring 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' prevents standard users from receiving credential prompts during elevation attempts. Setting 'User Account Control: Detect application installations and prompt for elevation' to 'Enabled' ensures software installation routines trigger UAC evaluation.

Step-by-Step Solution

1
Identify the proper snap-in for configuring User Account Control security baselines
Local Security Policy (secpol.msc) under Security Options houses granular UAC policy settings.
System-wide UAC elevation and detection policies are managed via local security options.
2
Select the policy setting that suppresses elevation prompts for standard accounts
Setting 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' prevents standard users from seeing credential prompts.
This automatically blocks privilege elevation attempts by non-administrative users.
3
Select the policy setting that monitors software installer executions
Enabling 'User Account Control: Detect application installations and prompt for elevation' causes Windows to detect setup programs and require elevation.
This prevents unauthorized applications from making silent or unapproved system modifications.

Key Concept

Windows User Account Control (UAC) Security Options in Local Security Policy (secpol.msc)
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic