Workstation Hardening Security Quiz

1. What does UAC (User Account Control) help prevent on a Windows workstation?

Unauthorized administrative changes and malware elevation

WiFi connectivity issues

Software installation delays

USB device detection

2. When hardening a workstation, what should be done with default user accounts and passwords?

Keep them for troubleshooting purposes

Change or disable all defaults immediately

Document them in a shared file

Use them only for testing

3. Which encryption standard is recommended for protecting data at rest on a hardened workstation?

DES

AES-256

MD5

SHA-1

4. What is the recommended approach for managing USB ports on a hardened enterprise workstation?

Allow all USB devices without restriction

Disable USB entirely

Use Group Policy to restrict USB to approved devices only

Allow USB only on Mondays

5. Which Windows Registry modification disables autorun features to prevent malware execution from removable media?

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

HKEY_CURRENT_USER\Software\Policies

HKEY_LOCAL_MACHINE\System\CurrentControlSet

HKEY_LOCAL_MACHINE\Software\Classes

6. What does DKIM (DomainKeys Identified Mail) help prevent when configured for email on a workstation?

Email spam filtering

Email spoofing and unauthorized domain use

Slow email delivery

Large attachment transfers

7. Which antivirus/anti-malware tool should be configured to run regular scans on a hardened workstation?

Scheduled scans on a regular basis

Only manual scans when suspicious

Disabled to improve performance

Scans only on Fridays

8. What is the purpose of disabling unnecessary network services during workstation hardening?

Improve Internet speed

Reduce attack surface and resource consumption

Enable remote access

Increase storage capacity

9. When hardening a Linux workstation, which command is used to restrict file permissions to owner read/write only?

Chmod 755

Chmod 600

Chmod 777

Chmod 644

10. Which auditing policy should be enabled to track unauthorized access attempts on a hardened workstation?

Audit Account Logon Events

Audit Process Creation

Audit Object Access

Audit Policy Change

11. Which BIOS/UEFI setting prevents unauthorized changes to firmware and should be enabled during workstation hardening?

Secure Boot

BIOS password protection

TPM 2.0

Fast Boot mode

12. Which Windows Update setting is recommended for a hardened workstation to ensure security patches are applied promptly?

Never check for updates

Check monthly

Automatic download and install

Manual installation only

13. What is the primary benefit of enabling Windows Defender Exploit Guard on a workstation?

Increases download speeds

Protects against exploit techniques and vulnerability attacks

Removes malware signatures

Disables network adapters

14. Which Windows feature automatically encrypts files and folders on NTFS volumes?

BitLocker

EFS (Encrypting File System)

RAID

Backup and Restore

15. When setting up user accounts on a new workstation, what is the best practice regarding the administrator account?

Use it for daily work tasks

Disable it after creating a standard user account

Share the password with all users

Rename it to 'Admin' for clarity

16. Which firewall configuration is most appropriate for a hardened workstation in an enterprise network?

Allow all inbound and outbound traffic

Block all inbound; allow necessary outbound

Disable firewall entirely

Allow only port 80 and 443

17. What does TPM (Trusted Platform Module) provide for workstation security?

Faster processor performance

Hardware-based encryption key storage and attestation

Enhanced WiFi connectivity

Improved battery life

18. Which Windows service should typically be disabled on a workstation to reduce the attack surface?

Windows Defender

Remote Desktop Protocol (RDP)

Windows Update

Network Discovery

19. When hardening a Windows workstation, which Group Policy setting should be configured to enforce strong password requirements?

User Rights Assignment

Password Policy

Account Lockout Policy

Audit Policy

20. What is the primary purpose of enabling Secure Boot on a new workstation?

Increases boot speed

Verifies bootloader and kernel signatures before loading

Encrypts the hard drive

Disables USB ports

Infrastructure Specialist Hardening a New Workstation Build Quiz