Examkin

Question

Difficulty: MediumWindows Security Settings and User Account Control

A systems administrator needs to ensure that whenever users in the local Administrators group attempt to perform tasks requiring elevated privileges on Windows 11 workstations, they are forced to re-enter their administrative credentials on the secure desktop rather than simply clicking a confirmation button. Which Local Security Policy setting should the administrator configure?

  1. Set "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" to "Prompt for credentials on the secure desktop"Answer
  2. B
    Set "User Account Control: Behavior of the elevation prompt for standard users" to "Prompt for credentials on the secure desktop"
  3. C
    Adjust the User Account Control settings slider in Control Panel to "Notify me only when apps try to make changes to my computer"
  4. D
    Modify local NTFS permissions on the System32 directory to deny execute permissions for administrative accounts

Answer

Set "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" to "Prompt for credentials on the secure desktop"
Configuring the Local Security Policy setting 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop' explicitly forces users belonging to the local Administrators group to enter their account credentials whenever an application requests elevated privileges. This ensures re-authentication and prevents unauthorized or automated elevated actions.

Step-by-Step Solution

1
Identify the target user group and desired elevation behavior.
The requirement targets administrative accounts (local Administrators group) and demands password re-entry (credentials prompt) instead of simple consent.
UAC distinguishes between administrative elevation prompts and standard user elevation prompts.
2
Locate the appropriate Local Security Policy setting under Security Options.
The relevant policy is "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode".
This policy controls whether administrators receive a consent prompt, a credential prompt, or no prompt upon elevation.
3
Select the option that forces credential re-authentication on the secure desktop.
"Prompt for credentials on the secure desktop" is selected.
This enforces identity verification by requiring administrators to re-enter credentials before granting elevated privilege access.

Key Concept

User Account Control Security Policy Elevation Prompt Configuration
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic