Which of the following are the BEST operating system security practices for a secure workstation? (Select TWO).

Question

Options

• AInstall a privacy filter
• BRun CHKDSK regularly
• CUpdated malware and virus definitions
• DRegularly schedule defragmentation
• EEnable active scanning

• A
  3% (1)
• B
  6% (2)
• C
  91% (31)

Explanation

C and E are correct because they directly address OS-level security against malicious software. Keeping malware and antivirus definitions updated ensures the security software can recognize the latest known threats, including new viruses, ransomware, and spyware. Active scanning (real-time protection) continuously monitors file system activity, downloads, and program execution, catching threats as they occur rather than only during scheduled scans. Together, these two practices form the core of endpoint security. The other options are incorrect for this purpose: A (privacy filter) is a physical accessory to prevent visual eavesdropping, not an OS security practice; B (CHKDSK) checks disk integrity and repairs file system errors - it is a maintenance tool, not a security tool; D (defragmentation) improves disk read performance and is purely a performance/maintenance task with no security benefit.

No community discussion yet for this question.