Quiz 3 Flashcards
The quickest way to lock a Windows computer is to press the_________________. This feature works in Windows 7 and higher. —
Windows Logo + L keys
All workstations should be configured so that user accounts are required to have a_______________, even if the workstation is on a peer-to-peer network. In a domain environment, you can configure the domain security policy to require all accounts to have a _________________. Local security policies can be used in non-domain environments. —
password
___________________________ensure that passwords are harder to guess because they include upper- and lower-case letters, numbers, and special characters. It is also recommended that ______________________ be at least eight characters in length. This restriction can also be configured using the local security policy or domain policy. —
Strong passwords
Administrators should configure _____________________ policies. Most organizations set a 60- or 90-day expiration, meaning that passwords must be reset within that time limit. —
Password expiration -
Configuring a __________________________ensures that the system settings stored in the BIOS or UEFI cannot be accessed or changed by unauthorized users. —
BIOS/UEFI passwords -
Users should only be granted permissions that they need to complete their jobs. For users that need administrative-level permission, the users should be given two accounts: one normal account with more restrictive permissions that they use for day-to-day activities and one administrative account that they use when performing administrative duties. Also, as a rule, permissions should be assigned to groups, and user accounts should be added to group accounts. This makes permission administration much more manageable. —
This is an example of Restricting user permissions
For any default user accounts that are created when an operating system or application is installed, the ___________________________ should always be changed. Most IT professionals and hacker are aware of default accounts. Renaming these accounts provides a level of protection. Always research any operating system or application that you install to learn of any default user accounts that are created at installation. (Keep in mind that the default Windows Administrator account cannot be renamed. It is important that this account be given a very strong password and that its use is audited.) —
Changing default user names and passwords
All default accounts that are created should be ________________if they will not be used. This is particularly important for the guest account. If possible, also rename the guest account. —
disabled
________________start after a period of idle time. For security reasons, a ________________ password policy is used to ensure that a user is required to enter his password when returning to his session. In addition, many companies have logoff policies that require users to log off from a computer when leaving for prolonged periods of time. —
Screensavers
It is a good practice to configure a computer to implement a ___________ after a certain amount of time without user interaction. This can be employed as part of the screensaver required password.
Timeout/screen lock -
Because you are never ensured that media, including floppy disks, CDs, DVDs, and so on, are safe and uncontaminated, you should be careful when inserting new media into a CD-ROM, DVD, or USB drive. As a precaution, you should ______________________ feature that is enabled by default in older Windows operating systems. Windows 7, by default, has ___________________ feature. In Windows 8 and higher, the term AutoPlay became the default for AutoRun and acts the same way as Autorun did. —
Disable Autorun -
____________________ are configured by administrators to limit the hours during which a user can log in to a system. This security feature, however, can cause problems if for any reason a user works outside his normal business hours. —
Login time restrictions
The user cannot create a ______________if the computer is a member of a domain. When a computer is a member of a domain, the computer can join a ______________, but it cannot create a ___________________. —
Homegroup
User Account Control (UAC) does not affect the ______________feature in Windows 7. —
Homegroup
Homegroups are available on all computers running _____________________________________However, Homegroups cannot be created on computers running_____________________________. —
Windows 7, Windows 8, and Windows 8.1. /// Windows 7 Starter or Windows 7 Home Basic
