12.5.9 - Users and Groups - Practice Questions

You want to create a new user account on a Windows system that can create and edit private files, start and stop the system, install applications, and add new device drivers. Which group should this user be a member of? ----------------------------------------------------------------------------- Users Administrators Guests Power Users

Administrators ------------------------------------------------------------- The user should be a member of the Administrators group. No other group can add new device drivers or install new applications.

You want to configure User Account Control so that you see the permission prompt only when programs try to make changes to your computer (not when you make changes). You do not want the desktop to be dimmed when the prompt is shown. What should you do? ---------------------------------------------------------------------------- Configure UAC to Always notify Disable Secure Desktop Configure UAC to Never notify Disable UAC

Disable Secure Desktop ------------------------------------------------------------ When you select the Notify me only when programs try to make changes to my computer (do not dim my desktop) option, the following happens: Notification happens when programs make changes. Notification does not occur when you make changes. The desktop is not dimmed, which means Secure Desktop is disabled.

You want to configure User Account Control so that when a UAC prompt is shown, the desktop is not dimmed, allowing you to continue working without responding to the prompt immediately. What should you do? ================================================================= In the Control Panel, go to System and Security, then System. In the Control Panel, select Programs, then Programs and Features. Edit settings in the Local Security Policy. In the Control Panel, select System and Security and then System. Click System protection.

Edit settings in the Local Security Policy. ----------------------------------------------------------- To see the prompt without dimming the desktop, you need to disable the Secure Desktop. The Secure Desktop dims the desktop and forces you to respond to the UAC prompt before you can do anything else. You can configure the Local Security Policy to disable the Secure Desktop. The only UAC setting available under User Accounts is to enable or disable UAC (disabling UAC prevents all prompts). Choose Notify me only when programs try to make changes to my computer (do not dim my desktop) to notify you when programs make changes (but not when you make changes) and without dimming the desktop.

On a Windows system, which of the following is true of groups? ----------------------------------------------------------------------- Group members have the access rights assigned to the group. Users can log on as the group and have all access rights assigned to the group. A group allows multiple users to share a single logon. Users and local resources, such as printers and shared folders, can be made members of a group. All group members have access to all resources in the same group.

Group members have the access rights assigned to the group. -------------------------------------------------------------- A Windows group is used to identify groups of user accounts that have similar access needs. Group members have the permissions and rights assigned to the group. Using groups simplifies administration. Instead of assigning permissions to each individual user account, you can assign permissions to the group and then make user accounts members of the group. Group accounts cannot be used for logon on a Windows system. Local hardware resources cannot be made members of a group on Windows.

A user calls to report a problem. She is trying to install an application on her new Windows 10 system, but cannot. Her user account is a member of the Users group on the system. What do you suspect is causing the installation issue? ----------------------------------------------------------------------------- She is not a member of the Power Users group. The application is incompatible with Windows 10. Her group membership does not allow her to install new software. Only apps from the Microsoft Store can be installed on a Windows 10 system.

Her group membership does not allow her to install new software. ------------------------------------------------------------ Members of the Users group are not allowed to make system-wide changes to the system, such as installing new applications. Only users who are members of the Administrators group can install new applications. On modern versions of Windows, users who are members of Power Users are not allowed to install applications. In fact, the Power Users group is only included for backwards compatibility with older versions of Windows. Windows 10 can run traditional desktop applications as well as apps from the Microsoft Store.

You have a laptop running Windows 10. User Account Control (UAC) has been disabled. How would you re-enable UAC on the laptop? (Select TWO. Each choice is complete solution.) ----------------------------------------------------------------------- In the Control Panel, select System and Security and then Security and Maintenance. In the Control Panel, select User Accounts and then Credential Manager. In the Control Panel, select User Accounts and then User Accounts. In the Control Panel, select System and Security and then System. Click Advanced system settings. In the Control Panel, select System and Security and then System. Click System protection.

In the Control Panel, select System and Security and then Security and Maintenance. ----- In the Control Panel, select User Accounts and then User Accounts. ---------------------------------------------------------- To configure UAC in Windows 10: In Control Panel, go to User Accounts. Select User Accounts, then Change User Account Control settings. In the Control Panel, go to System and Security. Select Security and Maintenance > Security and then select Change settings under User Account Control. You can also use the Change User Account Control settings link in System and Security. Edit the local security policy to configure UAC and control settings not available through the Control Panel.

A home office user employs a technician to secure a Windows computer. To secure the local accounts, which of the following actions should the technician perform? (Select TWO). ----------------------------------------------------------------------------- Rename the Administrator account. Remove the Power Users group. Disable the Guest Account. Move all accounts in the Administrators group to the Users group. Move all accounts in the Guests group to the Users group.

Rename the Administrator account. Disable the Guest Account. ------------------------------------------------------------ When securing a Windows computer that is in a home office and not part of a domain, a best practice is to rename the Administrator account and disable the Guest account. Beginning with Windows Vista, the Power Users group is only present for backwards compatibility with previous versions. It has no bearing on the security of a Windows computer. Moving all accounts in the Administrators group to the Users group will eliminate the ability of the accounts to perform administrative functions. Moving all accounts in the Guests group to the Users group may not change the effective security of the accounts, but the profiles for these accounts will not be deleted when the users sign out.

A small business hires an after-hours cleaning service that is known to have a high turnover of employees. They want to prevent unauthorized access to their computers, but do not want to spend money on new hardware. Which of the following is the BEST solution? --------------------------------------------------------------------------- Set login time restrictions. Change the default account names and passwords. Restrict user permissions. Require strong passwords.

Set login time restrictions. -------------------------------------------------------- Setting login time restrictions will allow logins during normal business hours. Restricting user permissions will do nothing to protect from unauthorized users. Requiring strong passwords with make it harder for unauthorized users to gain access, but is not the best solution in this scenario. Changing the default account names and passwords will make the computers more secure, but is not the best solution in this scenario.

You recently installed a Windows 10 system. During the installation process, you elected to sign into the system using a local user account. After using the system for a time, you decide to begin using an online Microsoft account to authenticate to the system instead. Click the Settings app option you would use to do this.

To associate a local user account with an online Microsoft user account on a Windows 10 system, go to the Settings app and select Accounts > Your email > Sign in with a Microsoft account. The Network and Internet option in the Settings app is used to configure network connections. The System option is used to configure system settings such as display resolution, notifications, and power options. The Update and Security option is used to configure automatic updates, backups, and Windows activation.

Which Windows component prompts the user for credentials or permission to protect against unauthorized activities, such as an unintended software installation? User Account Control (UAC) Windows Firewall with Advanced Security Windows SmartScreen Windows Defender

User Account Control (UAC) ------------------------------------------------------------- User Account Control (UAC) prompts the user for credentials or permission in an effort to minimize the dangers of unauthorized actions or unintended software installations. Windows SmartScreen is used to warn the user before running unrecognized apps and files downloaded from the internet. Windows Firewall protects the system from network attacks. Windows Defender scans software for malicious software, such as viruses or spyware.

You need to create a user account on a Windows system that can create files, run applications, and install printers when the driver for the printer already exists on the computer. You want the user to have only the minimum rights necessary on the computer. Which group should this user be a member of? ---------------------------------------------------------------------------- Guests Users Administrators Remote Desktop Users

Users --------------------------------------------------------- Members of the Users group can use the computer, but they cannot perform system administration tasks. They also may not be able to run legacy applications. Members of the Users group can save files to their own directories and run installed applications. They cannot share directories or install printers if the driver is not yet installed. They also cannot view or modify system files. Making the user a member of the Administrators groups would give the user too many rights. Members of the Remote Desktop Users group are only allowed to access the system remotely using the Remote Desktop Client.