220-1102 Question 494
Single answerDisable AutoRunA small accounting office has seen several cases where users insert USB flash drives and an installer launches automatically before the files are scanned. The office manager asks you to stop programs from launching automatically from removable media on all Windows 10 workstations, while still allowing users to open File Explorer and access the drive contents manually. Which action should you take?
- A
Configure a Local Group Policy setting to turn off AutoPlay/AutoRun for all drives
- B
Disable the Print Spooler service on each workstation
- C
Format all USB flash drives as NTFS before users connect them
- D
Remove drive letters from removable media in Disk Management
Show answer and explanation
Correct answer: A
Explanation
The best answer is to disable AutoPlay/AutoRun through Group Policy, such as the Local Group Policy setting under Administrative Templates for Windows components related to AutoPlay policies. This approach aligns with Microsoft security best practices for reducing malware risk from removable media while preserving normal user access to files. AutoRun has historically been abused by malware on USB devices and other removable media, so disabling it is a common hardening step in business environments. The key distinction is that disabling AutoRun/AutoPlay stops automatic execution, but it does not block manual access through File Explorer.
- A. Correct.
Correct. In Windows, the proper administrative way to prevent software from launching automatically when removable media is inserted is to disable AutoPlay/AutoRun through Group Policy. This stops automatic execution while still allowing users to browse the media manually in File Explorer. This is the most appropriate enterprise-style fix for the stated requirement.
- B. Incorrect.
Incorrect. The Print Spooler service manages print jobs and printer communication. It has nothing to do with whether removable media automatically launches software. A technician might confuse this with a general hardening step, but it does not address AutoRun behavior.
- C. Incorrect.
Incorrect. Changing the file system on USB drives does not disable AutoRun or AutoPlay. AutoRun behavior is controlled by Windows policies and system settings, not by whether the device is formatted as FAT32, exFAT, or NTFS. This option also creates unnecessary operational overhead.
- D. Incorrect.
Incorrect. Removing drive letters would prevent normal user access to the media, which conflicts with the requirement to let users manually open and view files. It is also not the standard method for controlling automatic program launch behavior.