Examkin

Soru

Zorluk: OrtaWindows Security Settings and User Account Control

A desktop support technician is configuring Local Security Policy (secpol.msc) settings on standalone Windows 11 Pro workstations. The organization's security policy mandates two specific conditions: standard users must be prompted to enter administrator credentials whenever attempting a task requiring elevation, and administrators logged into their accounts must be presented with a prompt asking for explicit consent without needing to re-enter their password. Which of the following User Account Control (UAC) policy settings should the technician configure to meet these requirements? (Select TWO.)

  1. User Account Control: Behavior of the elevation prompt for standard users -> Prompt for credentials on the secure desktopCevap
  2. User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode -> Prompt for consent on the secure desktopCevap
  3. C
    User Account Control: Behavior of the elevation prompt for standard users -> Automatically deny elevation requests
  4. D
    User Account Control: Run all administrators in Admin Approval Mode -> Disabled

Cevap

The technician should configure 'User Account Control: Behavior of the elevation prompt for standard users' to 'Prompt for credentials on the secure desktop' and 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for consent on the secure desktop'.
Configuring 'User Account Control: Behavior of the elevation prompt for standard users' to prompt for credentials forces Windows to display a credential dialog when a standard user attempts an administrative action, allowing privilege elevation upon entering admin credentials. Configuring 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' to prompt for consent requires administrators to explicitly approve privilege elevation via a Yes/No prompt on the secure desktop without typing a password.

Adım Adım Çözüm

1
Determine the required policy setting for standard user elevation.
Standard users require an elevation prompt that asks for administrator credentials.
Setting 'Behavior of the elevation prompt for standard users' to 'Prompt for credentials on the secure desktop' fulfills the standard user credential requirement.
2
Determine the required policy setting for administrator account elevation.
Administrators require a consent prompt (Yes/No confirmation) rather than entering credentials.
Setting 'Behavior of the elevation prompt for administrators in Admin Approval Mode' to 'Prompt for consent on the secure desktop' satisfies the administrative consent requirement.
3
Verify Local Security Policy (secpol.msc) node locations under Security Options.
Both options exist directly under Local Policies -> Security Options in secpol.msc.
Ensures technical accuracy within Windows security policy management.

Anahtar Kavram

Windows User Account Control (UAC) Local Security Policy options governing elevation prompt behaviors for standard and administrator accounts.
Bu soruyu puanla

Konular

Windows Security Settings and User Account Control

Bu konudan daha fazla soru