A cybersecurity technician is establishing baseline operational policies for workstation security across an enterprise network. Match each workstation hardening control on the left with the primary security risk it directly mitigates on the right.
- Disabling unneeded operating system servicesReduces attack surface by closing unnecessary network listening ports
- Configuring account lockout threshold rulesMitigates online brute-force and dictionary password attacks
- Enforcing password-protected screen saver timeoutsPrevents unauthorized physical access to unattended terminals
- Disabling AutoRun and AutoPlay policiesBlocks automatic execution of untrusted scripts from plugged-in storage drives
Answer
Matching pairs: Disabling unneeded OS services matches reducing attack surface by closing network listening ports; Account lockout thresholds match mitigating online brute-force password attacks; Password-protected screen saver timeouts match preventing unauthorized physical access to unattended terminals; Disabling AutoRun and AutoPlay policies matches blocking automatic script execution from plugged-in storage drives.
Each security control targets a specific vulnerability vector: disabling unnecessary services minimizes open ports and attack surface; account lockout policies defend against automated brute-force login attempts; enforcing screen saver password locks guards against local unauthorized access to unattended desktops; and turning off AutoRun/AutoPlay stops rogue USB drives from auto-launching malicious software.
Step-by-Step Solution
Key Concept
Workstation Hardening Controls and Risk Mitigation Mapping