1.4 KiB
SEC-7 Quiz: Workstation Hardening
Take this after studying notes/SEC-7-workstation-hardening.md.
Reply with answers like:
1B 2A 3D 4C 5B 6A 7D
Questions
- Which control protects data if a laptop drive is stolen?
A. APIPA
B. Disk Cleanup
C. SSID broadcast
D. Full-disk encryption
- Why should default usernames and passwords be changed?
A. It increases CPU speed
B. It disables DNS
C. Defaults are often publicly known
D. It changes the file system
- What does account lockout after failed password attempts help prevent?
A. Shoulder surfing only
B. Online brute force attacks
C. Disk fragmentation
D. DHCP failure
- Which setting should be disabled or restricted to reduce removable-media auto-execution risk?
A. File extension visibility
B. Screen brightness
C. Time zone
D. AutoPlay/AutoRun
- Why disable unnecessary services?
A. Each service can increase attack surface
B. It improves monitor resolution
C. It guarantees password recovery
D. It removes the need for backups
- Which tool shows BitLocker status from the command line?
A. netstat -ano
B. ipconfig /release
C. manage-bde -status
D. gpresult /r
- What should you do before disabling a service on a workstation?
A. Delete all user files
B. Confirm business/system impact
C. Disable antivirus permanently
D. Convert the drive to FAT32
Answer Key For Instructor
- D
- C
- B
- D
- A
- C
- B