220-1102 Practice Question: Password managers encrypt credential databases.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  password manager

  Why this is correct

  A password manager generates and stores unique complex passwords in an encrypted vault, satisfying the constraint of secure centralised storage for a shared workstation where users must not reuse or memorise credentials. It enforces per-site randomness and protects the vault with a single master password or biometric authentication, preventing credential theft from local browser storage or keyloggers.

• ✗

  System Restore

  Why it's wrong here

  System Restore creates volume snapshot-based restore points that revert Windows system files, registry keys, and installed program state to a prior point in time. Although it can roll back unintended system changes, it has no mechanism for generating, encrypting, or centrally managing per-site credentials, and it would not prevent password reuse or protect against keyloggers or browser credential theft. Restoring a system could even undo a recent password manager installation, making it a counterproductive choice for a shared training room workstation.

• ✗

  Local Users and Groups

  Why it's wrong here

  Local Users and Groups is a Microsoft Management Console (MMC) snap-in used to administer local user accounts, domain membership, and group policies on a standalone Windows system. It can set or reset local account passwords and control logon rights, but it does not provide an encrypted vault for storing passwords for websites or applications, nor does it generate unique credentials for different services. This tool addresses local OS authentication, not the centralized, encrypted storage of many distinct user credentials required for shared workstations.

• ✗

  Event Viewer

  Why it's wrong here

  Event Viewer reads and displays Windows event logs such as Application, Security, and System, allowing administrators to audit logon attempts, application errors, and other recorded events. While it can help detect suspicious login activity or trace credential misuse after the fact, it neither stores nor generates passwords and provides no proactive mechanism to enforce unique, complex credentials. Event Viewer is a diagnostic and auditing tool, not a credential-management solution, so it fails to meet the scenario's core requirement of secure centralized password storage.

Go deeper

Related to this question