Examkin

Question

Difficulty: MediumWorkstation Hardening and Best Practices

An IT technician is preparing a newly imaged Windows workstation for deployment in a corporate environment. To ensure defense-in-depth and follow workstation hardening best practices, place the following security configuration steps in the correct operational sequence, from first to last.

  1. 1Install all pending operating system security patches and system updates.
  2. 2Disable the built-in Guest account and rename or secure default administrative credentials.
  3. 3Disable unnecessary background services, unneeded open network ports, and AutoRun features.
  4. 4Configure local security settings, including screen saver password locks and account lockout thresholds.
  5. 5Enable host-based firewall rules and initiate full disk encryption.

Answer

The correct sequence for workstation hardening is: First, install OS security patches. Second, secure built-in accounts and default administrative credentials. Third, disable unnecessary services, ports, and AutoRun features. Fourth, enforce local policy controls such as screen saver password locks and account lockout rules. Fifth, activate host-based firewall protection and enable full disk encryption.
Hardening follows a logical sequence: patching vulnerabilities first, securing baseline user/admin accounts second, minimizing attack surfaces (ports/services/autorun) third, enforcing screen saver lockouts and policy rules fourth, and finalizing with host firewall and full disk encryption protections.

Step-by-Step Solution

1
Patch OS Vulnerabilities
Known software flaws are remediated prior to network exposure.
System updates prevent initial compromise of baseline software components.
2
Secure Account Baselines
Default administrative entry points are removed.
Disabling the Guest account and altering default admin details removes predictable attack targets.
3
Minimize Attack Surface
Unused communication ports and autorun vulnerabilities are closed.
Disabling unneeded services and automatic execution scripts prevents automated malware execution.
4
Enforce Local Security Policies
Inactivity locks and password lockout protections are active.
Enforcing screen saver timeouts and account lockouts mitigates physical access and brute-force threats.
5
Activate Host Boundary Protections & Encryption
Data at rest and host network traffic are shielded.
Enabling host firewalls and BitLocker completes defense-in-depth protection before full deployment.

Key Concept

Workstation Hardening Standard Operating Sequence
Rate this question

Topics

Workstation Hardening and Best Practices

More questions from this topic