Examkin

Soru

Zorluk: ZorApplication Installation and Configuration Concepts

A systems administrator is configuring the deployment of a custom enterprise application on 64-bit Windows 11 workstations. The setup executable registers a background system service during installation, and the application writes shared runtime configurations to a local directory. Standard non-administrative users must be able to launch the application and update its configuration without experiencing User Account Control (UAC) prompts or access denied errors. Which of the following steps should the administrator take to properly deploy and configure this application? (Select TWO.)

  1. Execute the application installer using an administrative account context to permit service registration during setup.Cevap
  2. Configure local file system access control lists (ACLs) to grant standard users Modify permissions on the application's dedicated subfolder inside %ProgramData%.Cevap
  3. C
    Configure the application shortcut to run in Compatibility Mode for an earlier OS version to suppress UAC administrative privilege prompts.
  4. D
    Append the /quiet command-line switch to the installer executable so it elevates privileges automatically under a standard user session.

Cevap

The administrator must execute the installer under an administrative account context to allow service registration, and grant standard users Modify permissions on the application's dedicated subfolder within %ProgramData%.
Installing software that registers system-level services requires administrative elevation to modify protected Windows components. To allow standard users to read and write shared configuration files without elevating their privileges or modifying protected %ProgramFiles% permissions, the administrator should adjust access control lists (ACLs) to grant Modify permissions specifically on the application's folder under %ProgramData%.

Adım Adım Çözüm

1
Analyze installation requirements for background service registration.
Registering Windows services requires modifying protected system configuration areas, necessitating administrative elevation.
Standard user accounts lack rights to create or modify system services.
2
Evaluate storage locations for user-editable shared application settings.
%ProgramData% is the proper location for shared application state, but standard users require explicit Modify permissions on the app's specific subfolder.
Standard users have read-only access to %ProgramFiles% and default %ProgramData% locations, so granting localized ACL rights prevents permission errors while maintaining principle of least privilege.
3
Evaluate and eliminate incorrect distractor actions.
Compatibility Mode and /quiet CLI switches do not bypass security boundaries or elevate privileges for non-administrative accounts.
Security controls like UAC and file system ACLs cannot be bypassed using installer UI switches or legacy compatibility shims.

Anahtar Kavram

Application installation administrative elevation and least-privilege folder permission configuration
Bu soruyu puanla

Konular

Application Installation and Configuration Concepts

Bu konudan daha fazla soru