Examkin

Question

Difficulty: MediumWorkstation Hardening and Best Practices

Match each workstation security hardening control on the left with its corresponding primary risk mitigation objective on the right.

  • Account Lockout ThresholdMitigates automated brute-force credential attacks by blocking access after consecutive failed logon attempts.
  • Disabling the Built-in Guest AccountEliminates an unauthenticated access vector that permits anonymous users local system logon without a password.
  • Closing Unused Listening PortsReduces the network attack surface by blocking unapproved remote service connections and network exploits.
  • Screen Saver Lock TimeoutPrevents unauthorized physical console access and shoulder surfing when a workstation is left unattended.

Answer

Account Lockout Threshold matches with mitigating brute-force credential attacks; Disabling the Built-in Guest Account matches with eliminating unauthenticated anonymous local system logon; Closing Unused Listening Ports matches with reducing the network attack surface by blocking unapproved remote connections; Screen Saver Lock Timeout matches with preventing unauthorized physical console access when workstations are unattended.
Each hardening control directly addresses a distinct attack vector: account lockout thresholds mitigate credential brute-forcing, disabling default guest accounts prevents unauthenticated anonymous access, closing unused ports shrinks the network attack surface, and enforcing a screen lock timeout prevents local physical tampering when the system is unattended.

Step-by-Step Solution

1
Analyze the role of the Account Lockout Threshold policy.
Identifies that locking an account after multiple invalid attempts prevents credential brute-forcing.
Restricts automated password guessing attempts.
2
Evaluate the risk of leaving default accounts enabled.
Determines that disabling the Guest account removes an inherent anonymous logon vector.
Enforces proper identification and user authentication baseline.
3
Assess the defensive benefit of closing unused network listening ports.
Recognizes that shutting down unneeded network services reduces entry points for remote exploits.
Shrinks the local device attack surface.
4
Examine the protection provided by setting a Screen Saver Lock Timeout.
Confirms that requiring re-authentication after inactivity secures unattended hardware.
Mitigates physical security exposure in open office or shared environments.

Key Concept

Workstation Security Hardening Control Objectives
Rate this question

Topics

Workstation Hardening and Best Practices

More questions from this topic