A recent security breach has caused a large company to audit its own internal security policy. The breach Involved an unauthorized user gaming access to an unattended computer by exploiting default…

The correct answer is B. Disabled guest account C. Screensaver password locks. The breach had two components: access via default credentials on an unattended machine, and privilege escalation. Disabling the guest account (B) directly addresses the use of default/guest credentials - removing that attack vector entirely. A screensaver password lock (C)…

Hardware and network troubleshooting

Question

A recent security breach has caused a large company to audit its own internal security policy. The breach Involved an unauthorized user gaming access to an unattended computer by exploiting default credentials and then further elevating system privileges. Which of the following security measures would have MOST likely prevented the breach? (Select TWO).

Options

AAccount lockout policy
BDisabled guest account
CScreensaver password locks
DBIOS password
EPassword expiration
FLogon time restrictions

How the community answered

(24 responses)

A
21% (5)
B
63% (15)
D
13% (3)
F
4% (1)

Explanation

The breach had two components: access via default credentials on an unattended machine, and privilege escalation. Disabling the guest account (B) directly addresses the use of default/guest credentials - removing that attack vector entirely. A screensaver password lock (C) would have prevented the unauthorized user from accessing the unattended, logged-in computer in the first place. An account lockout policy (A) helps against brute-force attacks, not default credential abuse. A BIOS password (D) does not prevent OS-level access. Password expiration (E) and logon time restrictions (F) do not address either of the specific vectors used in this breach.

Topics

#default credentials#screensaver lock#guest account#physical security

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice