220-1102 Question 367
Single answerGuest userA receptionist uses a shared Windows 10 workstation in a clinic lobby. The office manager wants occasional visitors to use the PC to browse the clinic's public website, but they must not be able to access staff documents, install software, or make system changes. The technician wants the simplest built-in option that provides temporary, limited access without giving the visitors a standard user account tied to the organization. Which account type should the technician use?
- A
Create and enable a Guest account for visitors
- B
Add visitors to the local Administrators group
- C
Create a standard local user account named Visitor and share its password publicly
- D
Have visitors sign in with the receptionist's account when needed
Show answer and explanation
Correct answer: A
Explanation
The best answer is to use a guest account because the requirement is temporary, limited access for occasional users without granting normal user ownership of the system. In A+ Core 2, account management questions commonly test the ability to match the account type to the business need while following least-privilege principles. A guest account is intended for users who need minimal access and should not be allowed to install applications or make administrative changes. By contrast, administrator access is far too permissive, a shared standard account is weaker from a security and accountability standpoint, and using another employee's account is explicitly against security best practices. Microsoft security guidance and common administrative best practices emphasize assigning only the permissions needed for the task and avoiding shared use of privileged or personal accounts.
- A. Correct.
Correct. A guest-type account is intended for temporary, limited access for users who do not need a personal account on the system. It is designed to restrict access compared to regular accounts and is the best match for occasional visitor use in an A+ Core 2 context focused on user account types and least privilege.
- B. Incorrect.
Incorrect. Adding visitors to the local Administrators group would grant excessive privileges, including installing software, changing system settings, and potentially accessing sensitive resources. This violates the principle of least privilege and would create a serious security risk in a shared clinic environment.
- C. Incorrect.
Incorrect. A standard local user account is more appropriate for a specific recurring user, not anonymous or occasional visitors. Sharing one common password publicly also creates accountability and security problems because actions cannot be tied to an individual and the account may retain files or settings between uses.
- D. Incorrect.
Incorrect. Letting visitors sign in with the receptionist's account is poor security practice. It exposes the receptionist's data, browser history, saved credentials, and access rights. It also removes any separation between staff activity and visitor activity, making auditing and privacy protection much harder.