Examkin

Question

Difficulty: HardWindows Security Settings and User Account Control

A security analyst is hardening standalone Windows 11 Pro workstations deployed in a high-security public kiosk environment. The organization requires that whenever a standard user attempts to launch an application or script requiring administrative elevation, Windows must automatically reject the request immediately without displaying a credential prompt. Which Local Security Policy setting under Security Options directly enforces this requirement?

  1. Set "User Account Control: Behavior of the elevation prompt for standard users" to "Automatically deny elevation requests"Answer
  2. B
    Set "User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode" to "Prompt for credentials on the secure desktop"
  3. C
    Open the User Accounts Control Panel applet and adjust the UAC slider to "Never notify" for standard user accounts
  4. D
    Modify explicit NTFS file permissions on system directories to remove the Read & Execute permission for the Standard Users group

Answer

Set "User Account Control: Behavior of the elevation prompt for standard users" to "Automatically deny elevation requests"
Configuring 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' in Local Security Policy directly satisfies the security requirement by automatically blocking standard user privilege escalation attempts without popping up an administrator credential prompt.

Step-by-Step Solution

1
Identify the target user role and requirement
The requirement specifies standard users attempting elevation on Windows 11 workstations, where requests must be automatically denied without prompting.
UAC security policies differentiate between administrators in Admin Approval Mode and standard users.
2
Locate the relevant security policy node in Windows
Open Local Security Policy (secpol.msc) and navigate to Security Settings > Local Policies > Security Options.
Advanced granular UAC behavior settings are managed via Security Options policies rather than standard GUI applets.
3
Select the correct elevation prompt policy for standard users
Configure "User Account Control: Behavior of the elevation prompt for standard users" to "Automatically deny elevation requests".
This configuration prevents standard users from elevating privileges or prompting for administrative credentials.

Key Concept

Windows Local Security Policy UAC Elevation Prompt Behavior Settings
Estimated Time:2m 0s
Rate this question

Topics

Windows Security Settings and User Account Control

More questions from this topic