nerdexam
CompTIA

220-1102 · Question #721

A network administrator wants to enforce a company's security policy that prohibits USB drives on user workstations. Which of the following commands should the administrator run on the users'…

The correct answer is C. gpupdate. To enforce a company's security policy that prohibits USB drives, a network administrator should use Group Policy to disable USB access and then run gpupdate to apply the new policy settings to workstations.

Security

Question

A network administrator wants to enforce a company's security policy that prohibits USB drives on user workstations. Which of the following commands should the administrator run on the users' workstations?

Options

  • Adiskpart
  • Bchown
  • Cgpupdate
  • Dnetstat

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    86% (32)
  • D
    3% (1)

Why each option

To enforce a company's security policy that prohibits USB drives, a network administrator should use Group Policy to disable USB access and then run gpupdate to apply the new policy settings to workstations.

Adiskpart

diskpart is a command-line utility used for managing disk partitions and volumes, not for enforcing system-wide security policies like disabling USB access.

Bchown

chown is a Unix-like command used to change the owner of files and directories, which is irrelevant for enforcing USB drive policies on Windows workstations.

CgpupdateCorrect

Group Policy is used to configure and enforce security settings across Windows domains, including controlling access to USB drives. After updating the Group Policy Object (GPO) to restrict USBs, the gpupdate command forces the local machine to refresh its Group Policy settings, applying the new restrictions immediately.

Dnetstat

netstat displays network connections, routing tables, and network interface statistics, which is unrelated to enforcing hardware access policies like prohibiting USB drives.

Concept tested: Group Policy enforcement

Source: https://learn.microsoft.com/windows-server/administration/windows-commands/gpupdate

Topics

#Group Policy#Security Policy#Windows administration#USB restriction

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice