Examkin

Question

Difficulty: MediumWorkstation Hardening and Best Practices

A systems administrator is configuring local security policies for standalone Windows workstations deployed in a public library's computer lab. Which TWO of the following administrative actions should the technician perform to reduce the attack surface and harden these workstations against unauthorized access?

  1. Disable the built-in local Guest account.Answer
  2. Configure AutoPlay and AutoRun settings to disabled for all removable drives.Answer
  3. C
    Disable the Windows Event Log service to prevent log file overflow.
  4. D
    Attach privacy screens to monitors to prevent physical tailgating through secure doors.

Answer

The technician should disable the built-in local Guest account and disable AutoPlay/AutoRun settings for all removable drives.
Hardening standalone workstations in public or shared spaces requires limiting unauthorized default access and preventing automated execution of external media. Disabling the local Guest account removes an unneeded login vector, and turning off AutoPlay/AutoRun prevents untrusted USB devices from launching malicious code upon insertion.

Step-by-Step Solution

1
Identify default account vulnerabilities
Disabling the default local Guest account restricts unnecessary local access vectors for anonymous users.
Hardening best practices mandate removing or disabling unneeded default accounts to reduce potential entry points.
2
Configure media execution controls
Disabling AutoPlay/AutoRun stops code execution when removable storage devices are connected.
Publicly accessible kiosks are vulnerable to malicious USB drives carrying autorun payloads.

Key Concept

Workstation Hardening via Account Controls and Removable Media Policies
Estimated Time:1m 30s
Rate this question

Topics

Workstation Hardening and Best Practices

More questions from this topic