Examkin

Soru

Zorluk: ZorWorkstation Hardening and Best Practices

An IT security administrator is implementing security baseline policies on corporate workstations to reduce the system attack surface. To comply with defense-in-depth requirements, the administrator must secure local user account configurations and prevent unauthorized automated execution of software via external storage. Which of the following procedures should the administrator perform to achieve this objective?

  1. Disable the local Guest account, rename the built-in Administrator account, and configure Group Policy to disable AutoRun/AutoPlay for all removable media.Cevap
  2. B
    Enable the local Guest account with a complex password and add it to the Remote Desktop Users group to enable audited remote access.
  3. C
    Use Task Scheduler to restrict AutoRun execution times and use Event Viewer to enforce account lockouts for default accounts.
  4. D
    Attach privacy filters to screens and deploy cable locks to automatically restrict background system services and network ports.

Cevap

Disable the local Guest account, rename the built-in Administrator account, and configure Group Policy to disable AutoRun/AutoPlay for all removable media.
Hardening a workstation involves minimizing its attack surface. Key practices include disabling unnecessary accounts (such as the default Guest account), renaming predictable accounts (such as the built-in Administrator account), and enforcing security policies like disabling AutoRun/AutoPlay via Group Policy to prevent automatic malware execution from external media.

Adım Adım Çözüm

1
Identify local account security risks
Disabling the Guest account and renaming the default Administrator account reduces the workstation attack surface by preventing baseline target exploitation.
Default account names are predictable targets for attackers attempting brute-force or credential stuffing attacks.
2
Identify autorun security risks
Disabling AutoRun and AutoPlay prevents malicious scripts from executing automatically when USB drives or external media are connected.
Automated media execution allows drive-by malware infections without user intervention.
3
Select the appropriate administrative configuration tool
Deploying these configurations via Group Policy enforces security baselines across endpoints consistently.
Group Policy Objects (GPO) allow system administrators to apply mandatory security settings centrally across Windows operating systems.

Anahtar Kavram

Workstation Hardening and Account Baseline Security
Bu soruyu puanla

Konular

Workstation Hardening and Best Practices

Bu konudan daha fazla soru