Examkin

Soru

Zorluk: KolayWorkstation Hardening and Best Practices

An IT technician is deploying new Windows workstations for a finance department. To prevent unauthorized or malicious software from automatically executing when employees insert USB flash drives, which of the following workstation hardening best practices should the technician implement?

  1. Disable the AutoPlay and AutoRun features across all workstations using Group Policy.Cevap
  2. B
    Enable the built-in Guest account and restrict its file access to read-only.
  3. C
    Configure Performance Monitor to track real-time disk utilization metrics.
  4. D
    Modify settings in Credential Manager to automatically save website passwords.

Cevap

Disabling the AutoPlay and AutoRun features across all workstations using Group Policy.
Disabling AutoPlay and AutoRun ensures that when removable drives are connected, Windows will not automatically run setup files or executable scripts without explicit user intervention, mitigating drive-by media execution attacks.

Adım Adım Çözüm

1
Identify the primary security threat in the scenario.
The threat is the automatic execution of untrusted or malicious files when removable media (such as a USB flash drive) is plugged into a system.
Hardening best practices aim to minimize automated execution vectors on end-user systems.
2
Select the policy control that directly prevents automated media execution.
Disabling AutoPlay and AutoRun prevents the operating system from reading autorun.inf files or automatically prompting users to launch executable files upon mounting media.
Enforcing this setting via Group Policy ensures consistent compliance across all workstations.

Anahtar Kavram

Workstation Hardening via Disabling AutoPlay/AutoRun
Bu soruyu puanla

Konular

Workstation Hardening and Best Practices

Bu konudan daha fazla soru