CompTIA A+ Core 2 Objective 2.6 Security - Workstation Best Practice

Workstation Best Practices

1 / 14

During a routine security audit, it was discovered that several workstations still use the default administrator passwords, posing a significant security risk. What action should the IT security team take to address this issue across all company workstations?

Maintain the default passwords but restrict the use of administrator accounts to IT staff only.

Change the default administrator passwords to unique, complex passwords for each workstation.

Eliminate the use of administrator accounts and grant all users equal permissions to simplify management.

Implement two-factor authentication for the default administrator accounts without changing the passwords.

2 / 14

An organization wants to ensure that its workstations are not left unattended and unlocked, posing a security risk. Which of the following practices should be enforced to address this concern?

Require users to log off their workstations whenever they leave their desk.

Set workstations to automatically lock after 5 minutes of inactivity.

Allow users to choose whether to lock their workstations based on personal preference.

Implement a policy that workstations be left on and unlocked for easy access by IT staff.

3 / 14

A new cybersecurity threat exploits the AutoRun and AutoPlay features in Windows to automatically execute malicious software from USB drives. The IT department must quickly mitigate this risk across all company workstations. What is the best course of action?

Disable the AutoRun and AutoPlay features on all workstations through Group Policy settings.

Instruct employees to manually scan all USB drives with antivirus software before use.

Encourage the exclusive use of cloud storage solutions and ban USB drives entirely.

Update antivirus software on all workstations to detect threats exploiting AutoRun and AutoPlay.

4 / 14

Employees at a consulting firm frequently work from public spaces, such as coffee shops and libraries. The IT department is concerned about the physical security of laptops and mobile workstations in these environments. Which of the following measures should be prioritized to mitigate the risk of theft or unauthorized access?

Implement cable locks for all laptops to secure them to immovable objects when unattended.

Advise employees to use privacy screens to prevent shoulder surfing but take no further actions.

Instruct employees to leave their laptops open and logged in for quick access, even when stepping away briefly.

Disable the BIOS/UEFI passwords as they may inconvenience employees who forget them.

5 / 14

To enhance security measures within the organization, the IT department decides to secure the boot process of all company workstations. Which of the following is the most appropriate action to achieve this goal?

Enable disk encryption on all workstations.

Set strong BIOS/UEFI passwords on all systems.

Disable all USB ports through the operating system settings.

Implement password expiration policies for all user accounts.

6 / 14

An organization aims to enhance the security of its workstations against unauthorized changes to firmware settings and to ensure that only trusted operating systems boot. What combination of security measures should be implemented to meet these objectives?

Set strong BIOS/UEFI passwords and enable Secure Boot on all workstations.

Disable Secure Boot to allow more flexibility in operating system choices and rely on antivirus solutions for security.

Encourage users to set their own BIOS/UEFI passwords but leave Secure Boot disabled for compatibility reasons.

Implement Secure Boot only, assuming BIOS/UEFI passwords are unnecessary due to the security provided by Secure Boot.

7 / 14

To minimize the risk of accidental or intentional system changes that could compromise security, a corporate IT policy now requires that user permissions on all workstations be carefully managed and restricted. What is the best approach for implementing this policy?

Grant all users administrative rights but monitor activity logs for unauthorized changes.

Assign users the minimum necessary permissions needed to perform their job functions.

Allow users to request temporary administrative privileges on an as-needed basis.

Implement a shared administrator account for users to access when higher privileges are needed.

8 / 14

To tighten security measures, a company’s IT department is reviewing user account configurations on all corporate workstations. Given the need to prevent unauthorized access to sensitive information, what policy regarding guest accounts should be adopted?

Enable guest accounts for convenience when external consultants visit the office.

Disable all guest accounts on corporate workstations to prevent unauthorized access.

Allow guest accounts with internet access only and no access to internal networks.

Use guest accounts as the default for all employees to minimize the risk of data leakage.

9 / 14

To prevent unauthorized access, a company policy mandates that all workstations should automatically activate a screen saver lock requiring a password upon resumption. What is the most effective way to implement this policy across all company workstations?

Manually configure each workstation to activate the screen saver lock after a predetermined period of inactivity.

Use Group Policy in Windows Active Directory to enforce screen saver locks across all workstations.

Instruct employees to manually activate the screen saver when they leave their workstation.

Disable screen savers to prevent any potential bypassing of lock screens.

10 / 14

An IT security training session is being conducted to educate employees about password best practices for their workstations. Which of the following guidelines should be emphasized as a best practice?

Use passwords with a minimum of 6 characters for ease of remembering.

Include a mix of uppercase, lowercase, numbers, and symbols in passwords.

Set passwords to never expire to avoid frequent changes.

Use personal information, such as birthdates, as passwords for easy recall.

11 / 14

A security consultant is advising a company on strengthening its password policies to safeguard against unauthorized access. Which of the following recommendations aligns best with current security best practices?

Implement a policy requiring passwords to be at least 16 characters long, including a mix of character types, and changed quarterly.

Encourage users to write down their passwords and keep them in a secure location to avoid forgetting them.

Allow passwords to include easily memorable information, such as common words or sequential numbers, for user convenience.

Set passwords to expire once a year to minimize the inconvenience of frequent changes.

12 / 14

The IT department is revising its account management policies to tighten security across the company’s workstations. Which of the following policy changes would most effectively improve workstation security?

Allow users to have administrative rights on their workstations to facilitate software installations.

Implement a failed attempts lockout policy after three incorrect login attempts.

Enable guest accounts on all workstations for visitors' convenience.

Set all user account passwords to never expire for user convenience.

13 / 14

In an effort to enhance workstation security, the IT department is drafting a guideline document for end-users. Which of the following practices should be included to ensure physical and digital security of the workstations?

Keep the workstation logged in when not in use for quick access.

Use a consistent password across all accounts for simplicity.

Enable screen saver locks with password protection on all workstations.

Share workstation passwords with colleagues to facilitate teamwork.

14 / 14

A company’s IT policy mandates that all workstations must have data-at-rest encryption enabled to protect sensitive data. Which of the following actions should an IT technician take to comply with this policy?

Enable BitLocker on Windows systems.

Set BIOS passwords on all systems.

Disable AutoPlay features on all workstations.

Implement screen saver locks with password protection.

Your score is

Exit

CompTIA A+ Core 2 Objective 2.6 Security – Workstation Best Practice