SY0-301 · Question #849
Jane, an IT administrator, is implementing security controls on a Microsoft Windows based kiosk used at a bank branch. This kiosk is used by the public for Internet banking. Which of the following…
The correct answer is A. Group policy implementation. Windows Group Policy provides comprehensive, enforceable restrictions on user and system settings, making it the most effective control for locking down a public-facing kiosk.
Question
Jane, an IT administrator, is implementing security controls on a Microsoft Windows based kiosk used at a bank branch. This kiosk is used by the public for Internet banking. Which of the following controls will BEST protect the kiosk from general public users making system changes?
Options
- AGroup policy implementation
- BWarning banners
- CCommand shell restrictions
- DHost based firewall
How the community answered
(58 responses)- A86% (50)
- B9% (5)
- C2% (1)
- D3% (2)
Why each option
Windows Group Policy provides comprehensive, enforceable restrictions on user and system settings, making it the most effective control for locking down a public-facing kiosk.
Group Policy allows administrators to enforce a wide range of restrictions including disabling access to the Control Panel, Registry Editor, command prompt, and system settings. Applied to a kiosk used by the general public, Group Policy can prevent any unauthorized configuration changes while still allowing the intended application to run.
Warning banners display acceptable use notices but provide no technical enforcement mechanism to prevent users from making system changes.
Command shell restrictions limit access to one specific attack vector but do not address the full range of system settings a user could modify through other interfaces.
A host-based firewall controls inbound and outbound network traffic but has no effect on a local user attempting to change system configuration settings.
Concept tested: Group Policy for kiosk lockdown and access control
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/group-policy/group-policy-overview
Topics
Community Discussion
No community discussion yet for this question.