Unit 3: System and Device Hardening

What is the primary goal of device hardening?

• Enhancing system performance
• Improving user experience
• Reducing attack surface
• Increasing software compatibility

Which of the following is NOT a common device hardening technique?

• Removing unnecessary software
• Disabling default accounts
• Patching vulnerabilities
• Overclocking the processor

Why is it important to apply strong passwords to administrative accounts?

• To prevent unauthorized access
• To improve system performance
• To protect user data
• To enhance system compatibility

How does disabling unused services contribute to device hardening?

• Reduces the attack surface
• Improves system performance
• Enhances user experience
• Increases software compatibility

What is the role of network segmentation in device hardening?

• Isolates sensitive systems
• Improves system performance
• Enhances user experience
• Increases software compatibility

Which of the following is NOT a core principle of the CIS Controls?

• Implement security controls
• Prioritize and sequence controls
• Continuously monitor and improve
• Achieve perfect security

What is the purpose of inventorying and controlling hardware and software assets?

• To identify and manage vulnerabilities
• To improve system performance
• To enhance user experience
• To increase software compatibility

How do the CIS Controls address data protection?

• By implementing data encryption
• By controlling data access
• By backing up data regularly
• All of the above

Why is it important to continuously monitor and improve security controls?

• To detect and respond to threats
• To enhance system performance
• To improve user experience
• To increase software compatibility

Which CIS Control focuses on protecting against malware and ransomware?

• Data Protection
• Inventory and Control of Hardware and Software Assets
• Continuous Vulnerability Management
• Controlled Use of Administrative Privileges