Initial Core 2 study project

quizzes/SEC-7-quiz.md

@@ -0,0 +1,68 @@
+# SEC-7 Quiz: Workstation Hardening
+
+Take this after studying `notes/SEC-7-workstation-hardening.md`.
+
+Reply with answers like:
+`1B 2A 3D 4C 5B 6A 7D`
+
+## Questions
+
+1. Which control protects data if a laptop drive is stolen?
+
+A. APIPA  
+B. Disk Cleanup  
+C. SSID broadcast  
+D. Full-disk encryption  
+
+2. Why should default usernames and passwords be changed?
+
+A. It increases CPU speed  
+B. It disables DNS  
+C. Defaults are often publicly known  
+D. It changes the file system  
+
+3. What does account lockout after failed password attempts help prevent?
+
+A. Shoulder surfing only  
+B. Online brute force attacks  
+C. Disk fragmentation  
+D. DHCP failure  
+
+4. Which setting should be disabled or restricted to reduce removable-media auto-execution risk?
+
+A. File extension visibility  
+B. Screen brightness  
+C. Time zone  
+D. AutoPlay/AutoRun  
+
+5. Why disable unnecessary services?
+
+A. Each service can increase attack surface  
+B. It improves monitor resolution  
+C. It guarantees password recovery  
+D. It removes the need for backups  
+
+6. Which tool shows BitLocker status from the command line?
+
+A. `netstat -ano`  
+B. `ipconfig /release`  
+C. `manage-bde -status`  
+D. `gpresult /r`  
+
+7. What should you do before disabling a service on a workstation?
+
+A. Delete all user files  
+B. Confirm business/system impact  
+C. Disable antivirus permanently  
+D. Convert the drive to FAT32  
+
+## Answer Key For Instructor
+
+1. D
+2. C
+3. B
+4. D
+5. A
+6. C
+7. B
+