An IT technician is establishing standard security hardening configurations across enterprise desktops. Match each workstation security control on the left with the primary risk mitigation it provides on the right.
- Disabling unnecessary background services and open network portsReduces the system attack surface by eliminating unneeded network listening endpoints.
- Configuring an aggressive screen lock timeout policyMitigates unauthorized access to unattended desktop sessions when users leave their work areas.
- Disabling the built-in Guest user accountPrevents unauthorized unauthenticated logons using default local credentials.
- Disabling Autorun and Autoplay featuresPrevents automatic execution of malicious payloads when external storage media is inserted.
Answer
Disabling unnecessary services and ports matches reducing the system attack surface. Configuring a screen lock timeout matches mitigating unauthorized access to unattended desktop sessions. Disabling the Guest account matches preventing unauthenticated logons using default local credentials. Disabling Autorun/Autoplay matches preventing automatic execution of malicious payloads upon inserting external storage media.
Each hardening control directly addresses a specific vulnerability vector: disabling unnecessary services minimizes overall network entry points; screen lock timeouts protect against physical access to unattended active sessions; turning off the Guest account eliminates default unauthenticated logon access; and disabling Autorun prevents drive-by execution of malware from attached removable media.
Step-by-Step Solution
Key Concept
Workstation Hardening and Best Practices