mediumMultiple ChoiceObjective-mapped
220-1202 Practice Question: During a security audit, you discover that a…
During a security audit, you discover that a Windows 10 workstation has a weak local administrator password. The company policy requires all local admin passwords to be at least 12 characters with complexity. Which tool can enforce this policy for all future password changes on that workstation?
⚠ Common exam trap
It's easy for candidates to confuse user account management tools (like lusrmgr.msc) with security policy enforcement tools, thinking they can set password requirements directly in the user properties, when in fact password policies are enforced system-wide via the Local Security Policy.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Local Security Policy (secpol.msc)
B is correct because the Local Security Policy (secpol.msc) includes the 'Password Policy' settings under Account Policies, where you can configure minimum password length (12 characters) and password complexity requirements. These settings are enforced by the Local Security Authority (LSA) for all future password changes on the workstation, directly aligning with the company policy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Local Users and Groups (lusrmgr.msc)
Why it's wrong here
Local Users and Groups (lusrmgr.msc) is a management console snap-in primarily used for creating, deleting, and managing local user accounts and groups on a standalone Windows machine. While it allows an administrator to set individual user passwords, it does not provide the functionality to define or enforce system-wide password policies such as minimum length, complexity requirements, or password history. Its scope is limited to account management rather than security policy configuration.
- ✓
Local Security Policy (secpol.msc)
Why this is correct
Local Security Policy (secpol.msc) is the correct administrative tool for configuring and enforcing a wide range of security settings on a local Windows computer, including detailed password policies. Within this console, administrators can define parameters like minimum password length, complexity requirements, password history to prevent reuse, and account lockout thresholds. These settings are crucial for establishing robust authentication security and mitigating brute-force attacks.
- ✗
Registry Editor (regedit)
Why it's wrong here
Registry Editor (regedit) is a low-level utility used for viewing and modifying the Windows Registry, which stores configuration settings for the operating system and installed applications. Although security policies, including password parameters, are ultimately stored as registry keys, directly editing them via `regedit` is not the standard or recommended method for policy management. Doing so bypasses the proper policy enforcement mechanisms and carries a significant risk of system instability or security misconfiguration if done incorrectly.
- ✗
Windows Defender Firewall with Advanced Security
Why it's wrong here
Windows Defender Firewall with Advanced Security (wf.msc) is an administrative tool specifically designed for configuring firewall rules and IPsec connection security settings on a Windows system. Its primary function is to control network traffic flow, permitting or denying connections based on predefined rules, and securing communications between devices. This tool has no functionality related to managing user accounts, password policies, or any other authentication-related security settings.
Go deeper
Related to this question
About these practice questions
One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.