220-1102 Operating Systems Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Assigned Access

  Why this is correct

  Assigned Access is a built-in Windows feature designed exactly for kiosk lockdown. It binds a specific user account to a single UWP or Win32 application, automatically signs that user in at boot, and prevents them from switching to the desktop or any other app. If the kiosk app terminates, the feature restarts it, and the shell is replaced so there is no way to access other system functions without resetting the account.

• ✗

  Group Policy

  Why it's wrong here

  Group Policy (gpedit.msc) can apply many security and user interface restrictions, such as hiding desktop icons, disabling shutdown, or blocking specific executables, but it does not natively replace the Explorer shell with a single application. A skilled user can typically press Ctrl+Alt+Del, Windows key, or Alt+Tab to escape to other parts of the OS unless you import dozens of restrictive policies. The intended kiosk mechanism is Assigned Access; Group Policy alone cannot provide automatic logon or prevent a user from launching arbitrary apps.

• ✗

  Local Security Policy

  Why it's wrong here

  Local Security Policy (secpol.msc) is a focused administrative tool that manages security-based settings like password complexity, account lockout thresholds, event-log size, user rights assignments, and security options. While you can use it to revoke a user's right to shut down the system or perform certain tasks, it has no concept of 'allowed applications' or a restricted shell. A local security policy cannot auto-logon a user, cannot select a single app to run, and cannot prevent the user from starting other programs from the Task Manager.

• ✗

  Task Scheduler

  Why it's wrong here

  Task Scheduler can be configured to run a program whenever a user logs on, so it might appear to launch a kiosk application automatically. However, Task Scheduler merely starts a process; it does not restrict the desktop, hide the taskbar, or block other applications from being opened. The user can always press Windows key or Ctrl+Shift+Esc to open Explorer or Task Manager and escape the 'kiosk' because the standard shell remains active. A true kiosk requires Assigned Access, which replaces the shell rather than simply scheduling a process.

Go deeper

Related to this question