A system administrator is hardening security policies on Windows 11 Pro workstations. The administrator must ensure that standard users are explicitly required to enter administrator credentials whenever privilege elevation is requested, and that all prompt dialogs take place in an isolated desktop environment protected from background process interference. Which TWO settings in Local Security Policy (secpol.msc) should be configured to fulfill these requirements? (Select TWO.)
- Set 'User Account Control: Behavior of the elevation prompt for standard users' to 'Prompt for credentials on the secure desktop'Answer
- Set 'User Account Control: Switch to the secure desktop when prompting for elevation' to 'Enabled'Answer
- CSet 'User Account Control: Admin Approval Mode for the Built-in Administrator account' to 'Disabled'
- DUse Windows Credential Manager to elevate the standard account to the local Administrators group
Answer
The correct options are the setting to set 'User Account Control: Behavior of the elevation prompt for standard users' to 'Prompt for credentials on the secure desktop' and the setting to set 'User Account Control: Switch to the secure desktop when prompting for elevation' to 'Enabled'.
To satisfy both requirements, the administrator must configure two specific Local Security Policy settings under Security Options: setting 'User Account Control: Behavior of the elevation prompt for standard users' to prompt for credentials ensures unprivileged users cannot elevate without administrator credentials, while setting 'User Account Control: Switch to the secure desktop when prompting for elevation' to Enabled guarantees the prompt opens in an isolated desktop context protected against background interference.
Step-by-Step Solution
Key Concept
Windows Local Security Policy UAC elevation prompt behavior and secure desktop isolation
Estimated Time:1m 30s