mediumMultiple ChoiceObjective-mapped
220-1202 Practice Question: A small business has a shared Windows 10…
A small business has a shared Windows 10 workstation that multiple employees use. They want to ensure that each user's desktop settings, files, and application data are completely isolated and that users cannot access each other's data. Which feature should you configure to achieve this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create standard local user accounts and set NTFS permissions on each user's profile folder.
Standard local user accounts with NTFS permissions provide isolation by default; each user has their own profile folder with restricted permissions. The other options either don't enforce isolation (guest account) or are for different purposes (domain, BitLocker).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable the built-in Guest account for all users.
Why it's wrong here
Enabling the built-in Guest account would grant limited, unauthenticated access, but critically, it does not create separate user profiles or isolate individual user data. All users logging in via the Guest account would share the same profile and access rights, making it impossible to maintain privacy or prevent one user from accessing another's files. This approach fails to meet the requirement for distinct user data separation on a shared workstation.
- ✓
Create standard local user accounts and set NTFS permissions on each user's profile folder.
Why this is correct
Creating standard local user accounts ensures each user has a distinct profile, preventing them from making system-wide changes that could affect other users or the operating system's stability. Crucially, setting explicit NTFS permissions on each user's profile folder (e.g., C:\Users\<username>) restricts access so that only the respective user and administrators can read or modify their data. This combination effectively isolates each user's files and settings, providing the necessary data privacy on a shared workstation.
- ✗
Join the computer to a domain and use roaming profiles.
Why it's wrong here
Joining the computer to a domain and implementing roaming profiles is designed for environments where users access their data from multiple workstations, syncing their profile across the network. While it centralizes profile management, it does not inherently isolate user data from other local users on a single shared workstation. Furthermore, establishing a domain infrastructure is significant overkill and unnecessary complexity for a small business with just one shared Windows 10 workstation, failing to address the core local data isolation requirement efficiently.
- ✗
Enable BitLocker on the system drive.
Why it's wrong here
Enabling BitLocker encrypts the entire system drive, protecting data at rest from unauthorized access if the drive is physically removed or the system is offline. However, BitLocker operates at the drive level and does not provide granular user-level access control once the operating system is running and the drive is unlocked. Any user successfully authenticated to the Windows 10 workstation would still have access to all unencrypted files on the drive, unless specific file system permissions (like NTFS) are in place to restrict them.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.