mediumMultiple ChoiceObjective-mapped
220-1102 Practice Question: Configuring a new Windows 10 workstation for a…
You are configuring a new Windows 10 workstation for a remote employee who will connect to the corporate VPN. The user should not be able to install software or change system settings. Which tool should you use to enforce these restrictions?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Local Group Policy Editor
Local Group Policy Editor (gpedit.msc) allows you to configure security and restriction policies on a standalone computer. You can disable the ability to install software by setting the 'Disable Windows Installer' policy and restrict access to Control Panel settings. This is the appropriate tool for a non-domain joined machine.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
User Account Control (UAC) settings
Why it's wrong here
User Account Control (UAC) is a security feature designed to prevent unauthorized changes to the operating system by requiring administrative approval for actions that could affect system stability or security. While it prompts for elevation and requires administrator credentials for most software installations, it does not inherently prevent a standard user from attempting an installation. A standard user can initiate the installation, but the process will halt at the UAC prompt, awaiting administrative credentials to proceed.
- ✓
Local Group Policy Editor
Why this is correct
The Local Group Policy Editor (gpedit.msc) is a powerful administrative tool available in Windows Pro and Enterprise editions, enabling administrators to configure security settings, software installation policies, and user environment settings for the local computer or specific users/groups. It provides granular control, including the ability to restrict access to the Control Panel and prevent users from installing software. These policies are persistent and apply across user sessions and reboots, making it an effective method for workstation hardening and enforcing compliance.
- ✗
Device Manager
Why it's wrong here
Device Manager is a Windows system utility primarily used for viewing and managing the hardware devices connected to a computer. It allows administrators to update, disable, or uninstall device drivers, and troubleshoot hardware conflicts or resource issues. However, Device Manager has no functionality to control user permissions, restrict software installations, or manage system-wide security policies. Its scope is strictly limited to hardware device management and driver configuration.
- ✗
Registry Editor
Why it's wrong here
Registry Editor manually modifies per-user or per-machine registry keys but provides no persistent, policy-enforced mechanism to block software installation or system setting changes across reboots or user sessions; it is tempting because it can directly disable specific features like Add/Remove Programs via registry hives, but the correct tool—Local Group Policy Editor or Microsoft Entra ID joined with Intune—applies computer-wide, non-bypassable restrictions that survive logoff and require no manual reapplication.
Go deeper
Related to this question
Learn chapter
Windows Editions and Features
Key term
Group Policy
Group Policy is a Windows-based feature that allows administrators to centrally manage and enforce settings for users and computers across an organization.
Key term
Control Panel
Control Panel is a central graphical interface in Windows operating systems used to configure system settings, manage hardware, and control user preferences.
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.