Workstation Security

What are some MS Windows features that provide data-at-rest encryption

• BitLocker

• BitLocker-To-Go

• EFS

What two factors are most important for creating strong passwords

Password length and complexity

What is a primary security requirement to maxamize protection against brute-force attacks on user accounts

Minimum password length

What should a strong password complexity requirement be

Contains a combination of characters from at least 3 character groups (Numbers, Non-alphanumeric characters, Uppercase, Lowercase)

What is the reason to set a password history policy to a high value

Uniqueness

What password policy enforces a mandatory password change after a specific time

Password expiration policy

What password policy setting determines the period of time that a password can be used before the system requires the user to change it

Maximum password age

What password policy setting determines the period of time that a password must be used before theuser can change it

Minimum password age

What password prevents unauthorized users from proceding when the computer is powered on

User password

What password restricts the scope of changes made in the BIOS/UEFI interface

Supervisor/Administrator password

What security best practice prevents access when leaving your computer but ensures work stays open upon return

Screensaver lock

What security best practice most effectively reduces the risk of unauthorized access to the user’s session and data when a workstation that must be left unattended for an extended period of time

Log off when not in use

What is a physical security measure against laptop theft

Cable lock

What is a sticky note with a users password in violation of

Clean desk policy

What is an end-user software tool specifically designed to store and manage login credentials

Password manager

What refers to an account management security measure that narrows down a user’s computer access to specified hours

Login time restrictions

What should you first do to prevent anonymous users to log in

Disable the guest account

What is a primary prevention method of brute force attacks

Set a maximum log-in attempt requests

What is a best practice for securing sensitive information on a workstation when temporarily unattended

Screen timeout lock

What is a primary security control used for temporary accounts

Account expiration dates

What is the best way to prevent commonly used admin credentials that are publicly documented and easily found

Change the default admin password

What is a good way to prevent a malicious USB from automatically executing malicious code in Windows

Disable AutoRun

What is a good way to reduce attack surface and improve device performance

Disable unused services