As an IT support technician, you are implementing standard security controls across office desktop systems. Match each workstation hardening technique on the left to its primary risk mitigation objective on the right.
- Disabling AutoPlay and AutoRun featuresPrevents automatic execution of malicious code from attached USB drives
- Configuring a short password-protected screen saver timeoutMitigates unauthorized physical access to unattended active sessions
- Disabling unneeded operating system background servicesReduces the network attack surface by closing unused ports
- Renaming or disabling the built-in Administrator accountProtects against targeted brute-force attacks exploiting default credentials
Answer
Disabling AutoPlay and AutoRun features matches with preventing automatic execution of malicious code from attached USB drives. Configuring a short password-protected screen saver timeout matches with mitigating unauthorized physical access to unattended active sessions. Disabling unneeded operating system background services matches with reducing the network attack surface by closing unused ports. Renaming or disabling the built-in Administrator account matches with protecting against targeted brute-force attacks exploiting default credentials.
Each hardening control directly addresses a distinct attack vector: disabling AutoPlay protects against removable media exploits, screen timeouts secure idle physical sessions, service minimization reduces open network ports, and account baseline changes mitigate default credential attacks.
Step-by-Step Solution
Key Concept
Workstation Hardening Controls and Risk Mitigation