Examkin

Soru

Zorluk: KolayWorkstation Hardening and Best Practices

Match each workstation hardening policy or control on the left to its corresponding primary risk mitigation objective on the right.

  • Disabling unneeded services and open portsReduces the system attack surface by removing active network listening points
  • Configuring screensaver password lock with timeoutProtects against unauthorized physical access when a user leaves their desk unattended
  • Enforcing account lockout threshold policyMitigates automated brute-force password guessing attacks on user accounts
  • Disabling AutoRun and AutoPlay featuresPrevents malicious scripts from automatically executing when USB drives are inserted

Cevap

Disabling unneeded services and ports reduces the system attack surface by removing active listening points. Setting a screensaver password lock protects against physical access on unattended systems. Enforcing account lockout threshold mitigates online brute-force password attacks. Disabling AutoRun and AutoPlay prevents malicious script execution from inserted USB drives.
Each hardening control directly addresses a distinct operational vulnerability: disabling unused services reduces attack surface, screensaver lock secures physical access, account lockout mitigates brute-force attacks, and disabling AutoRun blocks malicious removable media execution.

Adım Adım Çözüm

1
Identify the primary threat vector targeted by disabling unused services and listening ports.
Disabling unneeded network protocols and background services directly minimizes unnecessary attack surface.
Fewer listening ports mean fewer entry points for network vulnerabilities.
2
Identify the primary threat vector targeted by password-protected screensaver timeouts.
Locks the interactive user session automatically after inactivity.
Prevents unauthorized physical users from accessing logged-in resources.
3
Identify the primary threat vector targeted by account lockout policies.
Limits maximum consecutive failed login attempts.
Blocks automated scripts trying thousands of password combinations.
4
Identify the primary threat vector targeted by disabling AutoRun/AutoPlay.
Prevents Windows from executing default autorun files on removable media.
Stops malicious drives from executing payload code without user intervention.

Anahtar Kavram

Workstation Hardening and Best Practices
Bu soruyu puanla

Konular

Workstation Hardening and Best Practices

Bu konudan daha fazla soru