Examkin

Question

Difficulty: EasyWorkstation Hardening and Best Practices

An IT technician is deploying new Windows workstations for a finance department. To prevent unauthorized or malicious software from automatically executing when employees insert USB flash drives, which of the following workstation hardening best practices should the technician implement?

  1. Disable the AutoPlay and AutoRun features across all workstations using Group Policy.Answer
  2. B
    Enable the built-in Guest account and restrict its file access to read-only.
  3. C
    Configure Performance Monitor to track real-time disk utilization metrics.
  4. D
    Modify settings in Credential Manager to automatically save website passwords.

Answer

Disabling the AutoPlay and AutoRun features across all workstations using Group Policy.
Disabling AutoPlay and AutoRun ensures that when removable drives are connected, Windows will not automatically run setup files or executable scripts without explicit user intervention, mitigating drive-by media execution attacks.

Step-by-Step Solution

1
Identify the primary security threat in the scenario.
The threat is the automatic execution of untrusted or malicious files when removable media (such as a USB flash drive) is plugged into a system.
Hardening best practices aim to minimize automated execution vectors on end-user systems.
2
Select the policy control that directly prevents automated media execution.
Disabling AutoPlay and AutoRun prevents the operating system from reading autorun.inf files or automatically prompting users to launch executable files upon mounting media.
Enforcing this setting via Group Policy ensures consistent compliance across all workstations.

Key Concept

Workstation Hardening via Disabling AutoPlay/AutoRun
Rate this question

Topics

Workstation Hardening and Best Practices

More questions from this topic