Question

Difficulty: EasyWorkstation Hardening and Best Practices

An IT support specialist is setting up a shared kiosk workstation in a public library environment. To enforce basic workstation hardening controls before placing the computer into service, which TWO actions should the technician perform? (Select TWO.)

  1. Disable unused built-in user accounts, such as the default Guest account.Answer
  2. Enforce a screen saver password requirement coupled with an idle screen lock timeout.Answer
  3. C
    Open Event Viewer to actively monitor and block unauthenticated network traffic on local ports.
  4. D
    Attach a monitor privacy filter to prevent physical theft of the desktop hardware.

Answer

Disabling unused default accounts and enforcing a password-protected screen saver lock upon idle timeout are essential workstation hardening practices.
Hardening a workstation involves reducing potential attack vectors by managing local accounts (disabling unused built-in accounts) and protecting physical access to active sessions (requiring a password to clear an idle screen saver lock).

Step-by-Step Solution

1
Analyze account hardening requirements.
Disabling default accounts, such as the Guest account, closes unnecessary access paths.
Unused default accounts provide potential attack vectors if left enabled on a shared system.
2
Analyze local session protection measures.
Configuring a screen saver lock with password protection secures unattended workstations.
Idle timeouts prevent unauthorized individuals from interacting with an active desktop session.

Key Concept

Workstation Hardening Best Practices
Rate this question