Examkin

Soru

Zorluk: ZorWindows Security Settings and User Account Control

A desktop support technician is hardening a standalone Windows 11 Pro workstation to comply with corporate administrative policies. The requirement dictates that administrative users must be forced to enter their password on an isolated desktop whenever an elevation prompt occurs. Place the configuration steps in the correct order to implement and enforce this security baseline.

  1. 1Open the Run dialog box, enter secpol.msc, and press Enter to launch the Local Security Policy console.
  2. 2Expand the Local Policies folder in the left pane and select Security Options.
  3. 3Open 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' and set it to 'Prompt for credentials on the secure desktop'.
  4. 4Open an elevated Command Prompt and run 'gpupdate /force' to apply the modified policy immediately.

Cevap

The correct sequence begins with launching secpol.msc, navigating to Security Options under Local Policies, modifying the administrator elevation prompt behavior setting to require credentials on the secure desktop, and finally executing gpupdate /force in an elevated shell to enforce the change immediately.
To properly configure and enforce administrative elevation prompt behavior, a technician must first open secpol.msc, navigate to Local Policies -> Security Options, locate and set 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop', and complete the procedure by running 'gpupdate /force' in an elevated command line.

Adım Adım Çözüm

1
Launch the Local Security Policy console using secpol.msc.
The Local Security Policy management interface opens.
Granular UAC elevation behaviors must be configured through secpol.msc on non-domain Windows workstations.
2
Navigate through Local Policies to the Security Options container.
The right pane populates with detailed security parameters and UAC policy options.
UAC security policies are located within the Security Options node.
3
Configure 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for credentials on the secure desktop'.
The local policy setting is updated to require password re-entry on the secure desktop for administrative actions.
This specific setting satisfies the mandate requiring re-authentication instead of standard consent.
4
Execute gpupdate /force in an administrative command prompt.
The system re-evaluates local group policies and updates security settings instantly.
Forcing a policy update applies the security changes immediately across the workstation.

Anahtar Kavram

Local Security Policy (secpol.msc) UAC Elevation Prompt Configuration
Bu soruyu puanla

Konular

Windows Security Settings and User Account Control

Bu konudan daha fazla soru