220-1102 Question 499
Single answerScreen locksA company requires that Windows 11 laptops lock automatically after 10 minutes of inactivity to protect sensitive customer data. Several users report that their screens turn off after 10 minutes, but when they move the mouse, they return directly to the desktop without being prompted for a password. You need to enforce the required behavior with the least administrative effort on company-managed PCs. Which action should you take?
- A
Configure the screen saver timeout to 10 minutes and enable the policy that requires password protection when the screen saver resumes
- B
Set the monitor power-off timer to 10 minutes in Power Options
- C
Disable sleep mode so the desktop remains visible and users can lock the computer manually
- D
Reduce the account lockout threshold so users must reauthenticate after inactivity
Show answer and explanation
Correct answer: A
Explanation
The key issue is the difference between display power management and session security. A monitor turning off because of Power Options does not mean the workstation is locked. To meet the requirement that users must reauthenticate after 10 minutes of inactivity, the organization should enforce settings that trigger a screen saver after the idle period and require a password when the session resumes. In Windows environments, this is typically managed through Group Policy using settings such as screen saver timeout and password protection on resume. This aligns with standard security best practices for protecting unattended systems containing sensitive data.
- A. Correct.
Correct. In Windows, simply turning off the display does not lock the session. To require authentication after inactivity, an administrator can configure an idle timeout using screen saver settings and enable password protection on resume. In managed environments, this is commonly enforced through Group Policy, which provides centralized administration and consistent compliance across company PCs.
- B. Incorrect.
Incorrect. Powering off the monitor after 10 minutes saves power, but it does not secure the logged-in session. Moving the mouse or pressing a key can wake the display and return the user directly to the desktop if no lock mechanism is configured.
- C. Incorrect.
Incorrect. Disabling sleep mode does not improve security and actually increases the chance that an unattended logged-in session remains exposed. Relying on users to lock devices manually does not meet the requirement for automatic enforcement.
- D. Incorrect.
Incorrect. Account lockout threshold is a security setting that locks an account after a specified number of failed sign-in attempts. It is unrelated to inactivity or screen locking behavior, though it is a common point of confusion because both settings involve requiring users to sign in again.