WorksheetsDay 8 review
Total questions: 11
Worksheet time: 6mins
Your organization enforces password policies requiring 12 characters with uppercase, lowercase, numbers, and symbols. A user complains that it is too difficult to remember. Which password meets the policy requirements while balancing security and usability?
Summer2025!
H@ppyD0gRuns#
Password123!
JohnDoeSecure2025
A help desk technician discovers that an employee’s account was used to send malicious emails. The employee claims they were at lunch and left their computer unlocked. Which preventive control would best mitigate this type of attack in the future?
Full disk encryption
Auto-lock screensaver after 5 minutes
File-level permissions
BIOS password
During an audit, it was discovered that several workstations still have the local default administrator account enabled. Why is this a significant risk?
It violates encryption compliance requirements.
Default accounts are well-known targets for brute-force attacks.
It increases the risk of phishing attacks.
It consumes system resources unnecessarily.
A user is locked out after mistyping their password multiple times. Which attack vector is this account lockout primarily defending against?
Insider data theft
Brute-force guessing attacks
Privilege escalation
Social engineering
An intern plugs an unknown USB into a workstation. The system immediately attempts to install software without prompting. Which setting should be configured to prevent this?
Disable AutoRun/AutoPlay
Enable BitLocker To Go
Increase UAC to maximum
Apply file-level NTFS permissions
Users complain that their PCs slow down during scheduled full scans. Which administrative change is the best solution without reducing protection?
Turn off heuristic scanning
Schedule scans during non-working hours
Add the entire C:\ drive to exclusions
Switch to manual-only scans
A small business hosts an internal web server for employees. Which firewall rule must be created to allow external devices on the LAN to access the web server securely?
Outbound allow for port 80
Inbound allow for port 443
Outbound block for port 22
Inbound block for port 3389
A manager wants USB drives encrypted so that data cannot be accessed if lost. Which Windows feature should be deployed?
Encrypting File System (EFS)
BitLocker To Go
UAC at maximum
Windows Defender Credential Guard
While attempting to enable BitLocker on a laptop, the option is grayed out. Which is the most likely reason?
The system lacks a TPM chip and no USB startup key is configured.
The user has not updated their antivirus definitions.
The firewall is disabled.
Secure Boot is enabled.
During an internal security audit, it was discovered that three employees were using the same guest account to access sensitive applications because they found it convenient. What is the biggest security issue with this practice?
Antivirus software cannot scan guest accounts.
Shared accounts make accountability and auditing impossible.
Guest accounts have stronger restrictions by default.
Shared accounts prevent BitLocker from functioning correctly.
An employee attempts to install a free game from the internet on a company laptop. The system blocks the installation because the source is untrusted. Which feature is most likely responsible?
User Account Control (UAC)
App blocklist or application control policy
Windows Defender Firewall
EFS file encryption
