easyMultiple ChoiceObjective-mapped
220-1102 Practice Question: During a routine security audit, you discover…
During a routine security audit, you discover that several user accounts on a Windows 10 workstation have local administrator privileges when they should only be standard users. You need to quickly review and modify user account types from the command line. Which built-in tool should you use?
⚠ Common exam trap
Many candidates confuse `net user` with `net localgroup`, assuming `net user` can change group membership because it manages user accounts, but `net user` only modifies the user object itself, not its group affiliations.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
net localgroup
The `net localgroup` command is the correct built-in tool for this task because it allows you to both view and modify group memberships from the command line. Specifically, `net localgroup Administrators` lists current members, and `net localgroup Administrators <username> /delete` removes a user from the local Administrators group, effectively demoting them to a standard user. This directly addresses the need to quickly review and change user account types without a GUI.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
lusrmgr.msc (Local Users and Groups MMC)
Why it's wrong here
This is a graphical user interface (GUI) tool within the Microsoft Management Console (MMC) designed for interactively managing local user accounts and groups on a Windows system. While highly effective for visual administration, it is not a command-line utility. Therefore, it cannot be used for scripting, batch processing, or automated modifications of group memberships, which are often requirements in large-scale security audits or remote management scenarios where command-line tools are preferred.
- ✗
net user
Why it's wrong here
The net user command is specifically designed for managing individual local user accounts. Its primary functions include creating new user accounts, deleting existing ones, and modifying properties such as passwords, account activity status, and descriptions for specific users. However, net user does not provide direct functionality to add or remove users from local security groups; it can only display a user's current group memberships, not alter them.
- ✓
net localgroup
Why this is correct
The net localgroup command is the correct command-line utility for managing local security group memberships on a Windows system. It allows administrators to view existing local groups, create new ones, delete groups, and critically, add or remove specific user accounts from these groups. This functionality is essential for tasks like adjusting user privileges, enforcing the principle of least privilege, and rectifying unauthorized group memberships identified during a security audit.
- ✗
diskpart
Why it's wrong here
diskpart is a powerful command-line utility exclusively used for managing disk storage, partitions, and volumes on a Windows system. Its capabilities include creating, deleting, formatting, and resizing partitions, assigning drive letters, and managing storage pools. This tool operates at a fundamental hardware and file system level and has absolutely no functionality related to user accounts, security groups, or any aspect of user privilege management.
Go deeper
Related to this question
Learn chapter
Windows Editions and Features
Key term
Windows
Windows is a family of operating systems developed by Microsoft that manages computer hardware and software, providing a graphical user interface for users to interact with their devices.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
One of 495 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.