Examkin

Question

Difficulty: HardWorkstation Hardening and Best Practices

A security technician is configuring local group policies for corporate laptops issued to field auditors who frequently operate in untrusted, public environments. The technician must reduce the attack surface against unauthorized physical access when unattended and mitigate brute-force risks against default local credentials. Which of the following workstation hardening measures should the technician implement to meet these security requirements? (Select TWO.)

  1. Configure an screen saver lockout policy that requires password re-authentication after a short period of inactivityAnswer
  2. Disable the local Guest account and rename the default local Administrator accountAnswer
  3. C
    Use Event Viewer in Computer Management to dynamically block unauthorized incoming network ports in real time
  4. D
    Configure monitor privacy filter angles through the System applet in Control Panel to prevent hardware theft

Answer

The correct hardening measures are configuring an inactive screen saver lockout requiring password re-authentication, and disabling the local Guest account while renaming the default Administrator account.
Implementing an inactivity screen saver lock requiring password re-authentication protects unattended endpoints from physical access. Disabling the default Guest account and renaming the default local Administrator account minimizes local account exploitation risks.

Step-by-Step Solution

1
Identify physical/unattended access risks in public environments.
Determined that an automatic lock screen policy with re-authentication prevents unauthorized local access if a device is left unattended.
Screen saver lockout policies mitigate physical session hijacking.
2
Identify default account risks on local endpoints.
Determined that disabling Guest and renaming the default Administrator account mitigates baseline credential exploitation.
Default accounts with well-known SIDs/names are primary targets for automated malicious scripts.

Key Concept

Workstation Hardening via Account Management and Inactivity Lockout Policies
Rate this question

Topics

Workstation Hardening and Best Practices

More questions from this topic