220-1102 Question 369
Single answerLog-in OS optionsA technician is reconfiguring a shared Windows 11 workstation used at a hotel front desk. Several employees use the same PC during different shifts, and management wants each employee to sign in with a separate account. However, they do not want the usernames of previous employees displayed on the sign-in screen because of privacy concerns. Which log-in option should the technician configure to best meet this requirement?
- A
Enable the Interactive logon: Do not display last signed-in setting
- B
Enable Fast User Switching so users can change accounts without signing out
- C
Disable the lock screen so users go directly to the password prompt
- D
Configure the account policy to require complex passwords
Show answer and explanation
Correct answer: A
Explanation
The best answer is to enable the Windows security policy Interactive logon: Do not display last signed-in. This setting is commonly used on shared, kiosk-like, or public-facing systems to reduce disclosure of account names at the sign-in screen. It can be configured through Local Security Policy or Group Policy in Windows. This aligns with standard security best practices of limiting unnecessary exposure of user account information. Fast User Switching, lock screen settings, and password complexity policies may be useful in other contexts, but they do not directly solve the requirement to stop displaying previous usernames during log-in.
- A. Correct.
Correct. In Windows, the security policy setting Interactive logon: Do not display last signed-in prevents the sign-in screen from showing the name of the last user who logged on. This is appropriate for shared or public-facing systems where exposing usernames creates a privacy or security concern. Users must manually enter their username and password instead of selecting or seeing the previous account.
- B. Incorrect.
Incorrect. Fast User Switching allows multiple users to remain signed in simultaneously and makes it easier to switch between accounts, but it does not hide the identity of the last signed-in user on the log-in screen. In some shared environments, it may even increase exposure of active sessions if not managed carefully.
- C. Incorrect.
Incorrect. Disabling the lock screen changes the user experience before reaching the sign-in screen, but it does not specifically prevent the last signed-in username from being displayed. This option addresses convenience, not username privacy.
- D. Incorrect.
Incorrect. Requiring complex passwords is a good security practice, but it does not affect whether the sign-in screen shows the previous user's account name. This is a password policy issue, not a log-in display option.