220-1002 · Question #167
After a security audit, a technician is tasked with implementing new measures to help secure company workstations. The new policy states that all workstations must be signed off at night, a password…
The correct answer is A. Screen locks B. Screensaver passwords G. BitLocker. Three policy requirements map to three controls: (1) 'Signed off at night' is addressed by Screen locks (A), which automatically lock or log off the workstation after a period of inactivity, ensuring it is secured at the end of the day. (2) 'Password necessary to boot' is…
Question
After a security audit, a technician is tasked with implementing new measures to help secure company workstations. The new policy states that all workstations must be signed off at night, a password is necessary to boot the computer, and encryption must be enabled. Which of the following features should the technician implement to BEST meet these requirements? (Choose three.)
Options
- AScreen locks
- BScreensaver passwords
- CUEFI passwords
- DLogin time restrictions
- EStrong passwords
- FMultifactor authentication
- GBitLocker
- HCredential Manager
- ISmart card
- JBiometric authentication
How the community answered
(37 responses)- A68% (25)
- D8% (3)
- F3% (1)
- I5% (2)
- J16% (6)
Explanation
Three policy requirements map to three controls: (1) 'Signed off at night' is addressed by Screen locks (A), which automatically lock or log off the workstation after a period of inactivity, ensuring it is secured at the end of the day. (2) 'Password necessary to boot' is addressed by Screensaver passwords (B), which require authentication before a user can resume a session after the screen has locked or gone dark - effectively enforcing a credential challenge on resumption. (3) 'Encryption must be enabled' is addressed by BitLocker (G), Windows' built-in full-disk encryption tool that protects data at rest. Together, A and B enforce the sign-off and authentication requirements, while G fulfills the encryption mandate. UEFI passwords would add a pre-boot PIN but were not included in the listed correct answer.
Topics
Community Discussion
No community discussion yet for this question.