Soru

Zorluk: KolayWorkstation Hardening and Best Practices

An IT technician is preparing to harden a newly installed Windows workstation before introducing it into an enterprise environment. Place the following workstation hardening steps in the correct standard procedural sequence, from first to last.

  1. 1Change default administrator credentials and disable the built-in Guest account.
  2. 2Apply all outstanding operating system security patches and cumulative updates.
  3. 3Disable unnecessary services, unneeded application features, and AutoPlay/AutoRun.
  4. 4Enable and configure the host-based firewall rules and endpoint anti-malware software.

Cevap

The correct sequence for workstation hardening is: 1) Change default credentials and disable unused default accounts, 2) Apply all operating system updates and security patches, 3) Disable unnecessary system services and AutoPlay/AutoRun features, and 4) Enable host-based firewall rules and anti-malware protection.
A baseline workstation hardening workflow follows a logical order: first secure user accounts and default credentials to prevent basic unauthorized access; second, apply system updates and patches to address known security flaws; third, decrease the attack surface by disabling unneeded services and automatic feature execution; and finally, enable host firewalls and anti-malware software for continuous active defense.

Adım Adım Çözüm

1
Secure account access
Default credentials are changed and unneeded built-in accounts are disabled.
Prevents unauthorized access using widely known factory default accounts.
2
Patch software vulnerabilities
The operating system is fully updated with security hotfixes.
Closes known system vulnerabilities so update routines work reliably before services are restricted.
3
Reduce system attack surface
Unused services and features like AutoPlay are turned off.
Eliminates superfluous entry points that attackers or automated scripts could exploit.
4
Deploy active defensive security controls
Host firewall rules and anti-malware defenses are active.
Establishes real-time filtering and scanning for ongoing workstation operation.

Anahtar Kavram

Standard Workstation Hardening Procedure
Bu soruyu puanla