Examkin

Soru

Zorluk: OrtaWorkstation Hardening and Best Practices

A systems administrator is configuring local security policies on standalone Windows workstations designated for short-term contractors at a financial services firm. To minimize the attack surface associated with default credential exploitation and unauthenticated local access, which of the following workstation hardening actions should the technician perform?

  1. Disable the built-in Guest account and rename the default Administrator account.Cevap
  2. B
    Use Event Viewer to schedule daily clearing of the system log to reduce disk usage.
  3. C
    Modify Credential Manager to grant standard user accounts automatic administrative privileges without elevation prompts.
  4. D
    Attach privacy screen filters to monitors to prevent unauthorized account credential modifications.

Cevap

Disabling the built-in Guest account and renaming the default Administrator account is the best practice for local account hardening.
Disabling the built-in Guest account and renaming the default Administrator account reduces the workstation's attack surface by eliminating default entry points that attackers frequently target in automated brute-force attacks.

Adım Adım Çözüm

1
Identify baseline account hardening security requirements for standalone Windows systems.
Recognize that default accounts (Administrator and Guest) present well-known targets for malicious actors.
Default accounts have well-known names and predictable configurations across default OS installations.
2
Apply local account hardening best practices.
Rename the built-in Administrator account and ensure the Guest account is completely disabled.
This mitigates automated password spraying and unauthorized local logon attempts.

Anahtar Kavram

Workstation Account Hardening and Default Account Management
Bu soruyu puanla

Konular

Workstation Hardening and Best Practices

Bu konudan daha fazla soru