Soru

Zorluk: KolayWorkstation Hardening and Best Practices

As an IT support technician, you are implementing standard security controls across office desktop systems. Match each workstation hardening technique on the left to its primary risk mitigation objective on the right.

  • Disabling AutoPlay and AutoRun featuresPrevents automatic execution of malicious code from attached USB drives
  • Configuring a short password-protected screen saver timeoutMitigates unauthorized physical access to unattended active sessions
  • Disabling unneeded operating system background servicesReduces the network attack surface by closing unused ports
  • Renaming or disabling the built-in Administrator accountProtects against targeted brute-force attacks exploiting default credentials

Cevap

Disabling AutoPlay and AutoRun features matches with preventing automatic execution of malicious code from attached USB drives. Configuring a short password-protected screen saver timeout matches with mitigating unauthorized physical access to unattended active sessions. Disabling unneeded operating system background services matches with reducing the network attack surface by closing unused ports. Renaming or disabling the built-in Administrator account matches with protecting against targeted brute-force attacks exploiting default credentials.
Each hardening control directly addresses a distinct attack vector: disabling AutoPlay protects against removable media exploits, screen timeouts secure idle physical sessions, service minimization reduces open network ports, and account baseline changes mitigate default credential attacks.

Adım Adım Çözüm

1
Identify the primary threat vector associated with removable storage media.
Disabling AutoPlay/AutoRun directly prevents unauthorized executables from running automatically when flash drives are inserted.
AutoPlay/AutoRun exploits rely on OS features that execute scripts upon hardware detection.
2
Evaluate local physical session security measures.
Configuring a screen lock timeout ensures unattended workstations automatically lock and demand credentials.
Physical security best practices require securing idle endpoints against walkthrough intrusion.
3
Analyze operating system service minimization.
Disabling unneeded services shuts down associated listening network ports.
Fewer active background services result in a smaller overall system attack surface.
4
Examine local user account security baselines.
Disabling or renaming default accounts neutralizes automated attacks targeting known default account identifiers.
Attackers target well-known SID patterns and default names like 'Administrator' or 'Guest' first.

Anahtar Kavram

Workstation Hardening Controls and Risk Mitigation
Bu soruyu puanla