220-1102 Question 137
Single answerUser AccountsA technician is setting up a Windows 11 laptop for a temporary contractor. The contractor needs to use a line-of-business application installed on the PC and save files locally, but the company does not want the contractor to be able to install software, change security settings, or access other users' data. Which account configuration should the technician use?
- A
Create a standard local user account for the contractor
- B
Add the contractor's account to the local Administrators group
- C
Use the built-in Administrator account for the contractor during the contract period
- D
Create a guest account so the contractor has limited access
Show answer and explanation
Correct answer: A
Explanation
The best answer is to create a standard local user account. This meets the business need by allowing the contractor to sign in, run approved installed applications, and save files in the user's own profile while preventing administrative tasks such as software installation and system configuration changes. This aligns with the security best practice of least privilege, which is a core concept for user account management on A+ Core 2. Microsoft documentation for Windows account types distinguishes between standard accounts and administrator accounts, with standard accounts intended for everyday use and administrators reserved for elevated system management. The built-in Administrator account should be tightly controlled and not assigned for general use, and guest access is not the appropriate modern solution for a temporary worker who needs normal application access.
- A. Correct.
Correct. A standard user account follows the principle of least privilege and is the appropriate choice for a temporary user who needs to run installed applications and save files but should not be able to install most software, modify system-wide settings, or manage other users' data. In Windows, standard users can use installed applications and work with their own profile data without receiving administrative rights.
- B. Incorrect.
Incorrect. Membership in the local Administrators group grants elevated privileges, including the ability to install software, change security settings, create or modify other accounts, and make system-wide changes. That level of access directly conflicts with the company's requirement to restrict the contractor's permissions.
- C. Incorrect.
Incorrect. The built-in Administrator account is intended for administrative management and troubleshooting, not routine end-user access. Using it for a contractor would provide excessive privileges and reduce accountability because it bypasses least-privilege best practices.
- D. Incorrect.
Incorrect. Modern Windows versions do not rely on the old Guest account for this purpose, and guest-style access would generally be too limited or unavailable for a user who needs ongoing access to installed business applications and local file storage. A standard user account is the proper supported option.