Examkin

Soru

Zorluk: OrtaWindows Security Settings and User Account Control

A systems administrator needs to harden a standalone Windows 11 workstation by configuring User Account Control (UAC) to automatically deny all elevation prompts for standard domain users. Place the steps in the correct order to accomplish this configuration using the Local Security Policy snap-in.

  1. 1Open the Run dialog, type secpol.msc, and press Enter to launch the Local Security Policy management console.
  2. 2Navigate through the console tree to Security Settings > Local Policies > Security Options.
  3. 3Locate and double-click the policy named 'User Account Control: Behavior of the elevation prompt for standard users'.
  4. 4Set the security setting dropdown menu to 'Automatically deny elevation requests' and click OK.
  5. 5Execute gpupdate /force from an elevated Command Prompt to immediately enforce the modified local security policy.

Cevap

The correct sequence begins with opening secpol.msc, navigating to Security Settings > Local Policies > Security Options, selecting 'User Account Control: Behavior of the elevation prompt for standard users', setting the option to 'Automatically deny elevation requests', and executing gpupdate /force to apply the changes immediately.
Configuring UAC behavior policies on a Windows workstation requires launching secpol.msc to access Local Policies > Security Options. Modifying 'User Account Control: Behavior of the elevation prompt for standard users' to 'Automatically deny elevation requests' ensures standard users cannot elevate privileges. Executing gpupdate /force enforces the updated policy immediately.

Adım Adım Çözüm

1
Launch the management tool
Local Security Policy console opens
Administrative privilege and UAC security policies are configured in secpol.msc.
2
Navigate to the Security Options branch
Security Options policies are listed
Security Options contains fine-grained UAC behavior settings.
3
Open the standard user elevation policy
Policy properties configuration dialog appears
Targeting the specific setting controlling standard user privilege elevation.
4
Select 'Automatically deny elevation requests'
Standard user elevation prompts are suppressed and blocked
This satisfies the requirement to suppress credential prompts and prevent unauthorized elevation.
5
Run gpupdate /force in Command Prompt
Policy update completes successfully
Ensures immediate policy enforcement across the system.

Anahtar Kavram

Configuring User Account Control (UAC) security policies using Local Security Policy (secpol.msc)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Windows Security Settings and User Account Control

Bu konudan daha fazla soru