Examkin

Question

Difficulty: EasyWorkstation Hardening and Best Practices

A desktop technician is configuring a newly deployed Windows workstation for an administrative office. To minimize the local attack surface and adhere to workstation hardening best practices, which of the following actions should the technician take regarding default accounts?

  1. Disable the built-in Guest account and rename the default Administrator account.Answer
  2. B
    Enable User Account Control (UAC) suppression to allow default accounts automatic elevated execution.
  3. C
    Rely exclusively on physical cable locks to protect user accounts from unauthorized network access.
  4. D
    Use Event Viewer to manage user account permissions and disable active user profiles.

Answer

Disabling the built-in Guest account and renaming the default Administrator account is the correct hardening measure.
Disabling unneeded built-in accounts such as Guest and renaming default administrative accounts limits potential entry points and mitigates automated targeting of default username configurations.

Step-by-Step Solution

1
Identify default account vulnerabilities on a new OS installation.
Default accounts like Administrator and Guest are common targets for unauthorized access.
Attackers frequently target default account names because they are well-known across standard operating system installations.
2
Apply standard account hardening best practices.
Disable unneeded default accounts (such as Guest) and rename privileged default accounts (such as Administrator).
This reduces the overall attack surface of the workstation without hindering normal administrative duties.

Key Concept

Workstation account hardening by managing default and built-in accounts.
Rate this question

Topics

Workstation Hardening and Best Practices

More questions from this topic