Security

A systems administrator is configuring security settings on a standalone Windows workstation placed in a public access area. The administrator must minimize the attack surface by ensuring unauthenticated users cannot gain access using built-in system privileges, while also preventing arbitrary scripts from executing automatically whenever a flash drive is inserted. Which of the following administrative actions best achieves these workstation hardening goals?

An IT security technician is auditing embedded smart badge reader terminals installed at corporate building entry points. The audit reveals that the readers communicate directly on the main internal employee network and retain default administrative passwords. Which of the following actions should the technician implement FIRST to harden these embedded systems and reduce network risk?

A cybersecurity technician is establishing baseline operational policies for workstation security across an enterprise network. Match each workstation hardening control on the left with the primary security risk it directly mitigates on the right.

A systems administrator at a municipal transit operations center is following the standard CompTIA seven-step malware remediation workflow to resolve a malware infection on a Windows workstation. The administrator has already quarantined the machine, disabled System Restore, updated anti-malware signatures, scanned and removed the malicious files, and configured scheduled automatic scans and updates. Which step should the administrator perform NEXT?

A desktop support technician at an automotive assembly plant is responding to a workstation infected with rogue adware causing unexpected browser redirects. The technician has already identified and researched the malware symptoms. Arrange the subsequent remediation actions in the correct chronological order according to the standard CompTIA 7-step malware removal process.

A systems administrator is configuring endpoint security profiles for enterprise mobile devices and specialized embedded hardware. Which mobile and embedded security control correctly matches each operational requirement?

A desktop technician at a biopharmaceutical research laboratory is remediating a Windows 11 workstation infected with a trojan. The technician has already disconnected the computer from the network to quarantine the system and has disabled System Restore. Which of the following actions should the technician perform NEXT as part of the standard malware remediation process? (Select TWO.)

An IT technician is hardening a workstation located in a shared medical clinic treatment room. To mitigate the risk of unauthorized access when clinical staff temporarily step away from the active session, the technician must ensure the desktop automatically secures itself after three minutes of inactivity and requires user authentication to resume. Which of the following configuration settings directly accomplishes this security objective?

An IT technician is provisioning corporate mobile tablets for field delivery drivers. The organization requires the tablets to lock down user interaction so drivers can only run a proprietary navigation app, while completely blocking access to device settings, web browsers, and third-party app installations. Which Mobile Device Management (MDM) configuration should the technician apply?

A systems technician at a municipal water treatment facility has just finished isolating a Windows workstation infected with a spyware keylogger, disabling System Restore, updating the antivirus definitions in Safe Mode, and successfully removing the malicious software. Which of the following actions should the technician perform NEXT according to the standard CompTIA malware remediation process?

A security administrator is updating Mobile Device Management (MDM) policy profiles for mobile devices connecting to corporate data under a Bring Your Own Device (BYOD) initiative. The security strategy requires isolating corporate data from personal applications to prevent data leakage and prohibiting users from installing unverified applications from unofficial app stores. Which TWO of the following security controls should the administrator implement to meet these requirements? (Select TWO.)

An IT technician is preparing a newly imaged Windows workstation for deployment in a corporate environment. To ensure defense-in-depth and follow workstation hardening best practices, place the following security configuration steps in the correct operational sequence, from first to last.

A systems technician is configuring security hardening settings on newly deployed Windows workstations used in a retail environment as point-of-sale terminals. To reduce the system's attack surface and prevent unauthorized automated execution of malicious files from USB flash drives, which of the following administrative actions should the technician perform?

An IT support technician is deploying networked smart HVAC controllers throughout a company's corporate office. The embedded operating systems on these controllers cannot support third-party endpoint security software, centralized domain joining, or local user credential management. Which of the following security practices should the technician implement to BEST secure these embedded systems against unauthorized network access?

A desktop technician is configuring local security settings on newly provisioned standalone Windows workstations for a financial call center. The security baseline requires mitigating credential-based attacks targeting default accounts and restricting unauthorized incoming network traffic without disabling essential management access. Which TWO configuration settings should the technician implement to meet these hardening requirements?

An IT security analyst is establishing security baseline controls for enterprise mobile devices and embedded systems. Match each mobile or embedded security technology to its primary operational capability.

A tier-2 helpdesk technician at an electric vehicle charging network operations center is responding to an infected Windows 11 workstation that has already been disconnected and quarantined from the local network. The technician needs to prepare the system for malware removal. According to the standard CompTIA malware remediation process, which TWO of the following actions should the technician perform NEXT before initiating a full system anti-malware scan? (Select TWO.)

An IT security technician is establishing baseline OS hardening parameters for new workstations deployed in an enterprise accounting department. To reduce the system's attack surface and prevent unauthorized remote modification of system configuration settings without impacting standard domain functionality, which of the following actions should the technician perform?

A cybersecurity technician at a commercial maritime container terminal is troubleshooting a Windows 11 workstation used for crane operations. The workstation is displaying rogue pop-up advertisements and experiencing unauthorized browser redirects. The technician has already isolated the workstation from the local network to quarantine it and has disabled System Restore. Which of the following actions should the technician perform NEXT according to the standard CompTIA malware remediation process?

An IT technician is establishing standard security hardening configurations across enterprise desktops. Match each workstation security control on the left with the primary risk mitigation it provides on the right.