100-160 Question 113
Select 3A cybersecurity technician is tasked with securing the operating system of an organization's servers. As part of the task, the technician must ensure that only necessary services are running, user accounts have strong passwords, and the system is protected against malware. Which of the following measures should the technician implement to achieve these goals?
- A
Disable unused services and ports on the operating system.
- B
Use default administrative usernames to simplify account management.
- C
Enable automatic updates to ensure the operating system is patched.
- D
Install and configure antivirus or endpoint protection software.
- E
Create user accounts with weak passwords to make them easy to remember.
Show answer and explanation
Correct answers: A, C, D
Explanation
Securing an operating system involves reducing its attack surface, ensuring it is up-to-date with security patches, and implementing defenses against malware. Disabling unused services and ports, enabling automatic updates, and installing antivirus software are critical measures. Using default usernames or weak passwords introduces significant security risks and should be avoided.
- A. Correct.
Disabling unused services and ports reduces the attack surface of the operating system and prevents unauthorized access points.
- B. Incorrect.
Using default administrative usernames can make the system vulnerable to brute force or dictionary attacks, as these names are often well-known.
- C. Correct.
Enabling automatic updates ensures the operating system remains patched against the latest security vulnerabilities.
- D. Correct.
Installing and configuring antivirus or endpoint protection software helps detect and prevent malware infections.
- E. Incorrect.
Creating user accounts with weak passwords increases the risk of unauthorized access and does not align with best practices for operating system security.