The IT department has installed new software in the folder C:\Program Files\Business Application\. Ann, a user, runs the business application and tries to save her work. When doing so, Ann receives…

Question

Options

• AAdd Ann to the local Power Users group
• BSet the software to save to the %APPDATA% folder
• CAdd Ann to the local administrator group
• DGive Ann write access to C:\Program Files\
• EGive Ann permission to elevate her permissions through a UAC prompt

• A
  4% (1)
• B
  8% (2)
• D
  12% (3)
• E
  77% (20)

Explanation

C:\Program Files\ is a protected Windows directory that requires administrator rights to write to. The most secure solution follows the principle of least privilege: a UAC (User Account Control) prompt allows Ann to perform only that specific elevated action when needed, without granting her permanent elevated access. Adding Ann to the local Administrators or Power Users group (options A and C) gives far broader privileges than required. Giving her write access to all of C:\Program Files\ (D) weakens system-wide security. Saving to %APPDATA% (B) could work architecturally but requires modifying the software itself and may not match the application's expected file layout.

No community discussion yet for this question.