Examkin

Soru

Zorluk: ZorWindows Security Settings and User Account Control

A desktop technician is hardening standalone Windows 11 Pro workstations. The security policy mandates that administrative users must explicitly re-enter their credentials on the Secure Desktop whenever an application requests elevated privileges. In what sequence should the technician perform the steps to configure this behavior via Local Security Policy?

  1. 1Open the Run dialog box by pressing Win + R, enter secpol.msc, and click OK.
  2. 2Expand Local Policies in the left navigation pane and select Security Options.
  3. 3Locate and open User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode.
  4. 4Change the security setting dropdown to Prompt for credentials on the secure desktop and click OK.

Cevap

The correct sequence is to first open the Run dialog box and launch secpol.msc, then navigate to Local Policies > Security Options, next open User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode, and finally select Prompt for credentials on the secure desktop and click OK.
To enforce credential prompting for administrators on the Secure Desktop, the technician must first access the Local Security Policy console via secpol.msc. From there, expanding Local Policies and clicking Security Options brings up UAC policy settings. Opening 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' allows changing the default consent behavior to 'Prompt for credentials on the secure desktop'.

Adım Adım Çözüm

1
Launch the Local Security Policy console
The secpol.msc console window opens.
Administrative security options such as UAC elevation behaviors are managed through the Local Security Policy console.
2
Navigate to the Security Options node
The panel displays security policies related to account behavior and UAC settings.
User Account Control policies reside under Local Policies > Security Options in the console hierarchy.
3
Select the administrator elevation policy
The properties dialog window for administrator elevation prompts opens.
The policy named 'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' explicitly targets administrator elevation responses.
4
Configure the dropdown option to prompt for credentials on the secure desktop
The policy is updated to require full credential entry on the dimmed Secure Desktop whenever elevation is requested.
This setting enforces re-authentication on the Secure Desktop to prevent automated malware privilege escalation.

Anahtar Kavram

Configuring User Account Control elevation policy settings using secpol.msc
Bu soruyu puanla

Konular

Windows Security Settings and User Account Control

Bu konudan daha fazla soru