A systems specialist is preparing a batch of Windows 11 desktop computers designated for a corporate financial analysis unit handling restricted client data. The goal is to reduce the attack surface and prevent unauthorized physical or administrative access. Which of the following steps should the specialist execute to properly harden these workstations? (Select TWO.)
- Disable the built-in Guest account and rename the local Administrator account.Cevap
- Configure a mandatory screen saver lock policy requiring password authentication upon resume.Cevap
- CEnable the default Guest account to allow external auditors quick local logon privileges without credential provisioning.
- DInstall physical privacy filters on monitors as a primary control to stop unauthorized entry tailgating.
Cevap
The specialist should disable the built-in Guest account while renaming the local Administrator account, and configure a mandatory screen saver lock policy requiring password authentication upon resume.
Hardening workstations involves eliminating unnecessary account vectors (such as disabling the Guest account and renaming the default Administrator account) and mitigating physical exposure through unattended session controls (such as screen saver locks requiring password authentication).
Adım Adım Çözüm
Anahtar Kavram
Workstation Hardening and Attack Surface Reduction