Exam 220-1002 topic 1 question 167 discussion

Actual exam question from CompTIA's 220-1002

Question #: 167
Topic #: 1

The IT department has installed new software in the folder C:\Program Files\Business Application\. Ann, a user, runs the business application and tries to save her work. When doing so, Ann receives the following error:
Cannot save file C: \Program Files\Business Application\file1.wrk `" Access is denied.
Which of the following would be the MOST secure solution to this error?

A. Add Ann to the local Power Users group
B. Set the software to save to the %APPDATA% folder
C. Add Ann to the local administrator group
D. Give Ann write access to C:\Program Files\
E. Give Ann permission to elevate her permissions through a UAC prompt

Show Suggested Answer

Suggested Answer: E 🗳️

by alaaaboud at Feb. 21, 2021, 5:32 p.m.

Comments

Submit Cancel

alaaaboud

Highly Voted 4 years, 4 months ago

Set the software to save to the %APPDATA% folder

upvoted 5 times

dnbly

4 years, 2 months ago

Appdata is a hidden admin folder containing software configuration files. Ann may also need read access to retrieve the file later (aka permanent admin privelages to the folder) so maybe not the best alternative to a one-time UAC prompt.

upvoted 1 times

mikey6567

3 years, 4 months ago

No! Appdata is a globally writeable directory, it is NOT an admin directory. Any user or application can write to Appdata which is why bad actors will sometimes use this directory for malware installation.

upvoted 1 times

mikey6567

3 years, 4 months ago

However, for this situation the correct solution would be "E" to reconfigure Ann's UAC policy to allow her to provide elevated credentials when needed.

upvoted 1 times

...

VasiliyFis

Most Recent 3 weeks, 6 days ago

Selected Answer: B

The C:\Program Files directory is protected and requires administrative privileges to write to. It's not intended for user data storage, which is why Ann receives an "Access is denied" error when trying to save there. The %APPDATA% folder is the correct and secure location for applications to store user-specific data. It allows write access without requiring elevated permissions or modifying system-wide security settings.

upvoted 1 times

...

xFlow777

2 years, 12 months ago

I say B it is the most secure way to allow the user save her work without giving her admin permissions with UAL or without.

upvoted 2 times

...

l0609890

4 years ago

User Account Control makes sure certain changes are made only with approval from the administrator. If the changes are not approved by the administrator, they are not executed, and Windows remains unchanged

upvoted 4 times

xFlow777

2 years, 12 months ago

With the approval of the user, she gets the administrator permissions, UAC prevents applications executing with elevated permissions without your approval. In this scenario the user would be able to do ANYTHING UAC would only ask her if you really wanna do this.

upvoted 1 times

...