Security and Authentication Flashcards

Which Windows Hello authentication method uses facial recognition to sign in to Windows 10?

Answer: Windows Hello Face

Windows Hello Face uses an IR camera to perform biometric facial recognition for passwordless sign-in.

What type of attack does the Account Lockout Policy primarily protect against?

Answer: Brute-force password attacks

Account lockout limits consecutive failed attempts, making automated brute-force guessing of passwords impractical.

Where in Windows Security can you view the history of threats detected and remediated by Windows Defender?

Answer: Virus & threat protection > Protection history

Protection history in the Virus & threat protection section shows a log of all detected threats and the actions taken.

Which Windows 10 security feature helps prevent unsigned or untrusted drivers from loading during boot?

Answer: Secure Boot

Secure Boot is a UEFI feature that only allows digitally signed bootloaders and OS components to execute at startup.

A technician discovers that Windows Firewall is blocking a legitimate application. Which tool quickly creates an inbound rule exception?

Answer: Either A or C

Both the Windows Security app's 'Allow an app through firewall' and the advanced wf.msc console can create inbound exceptions.

What does enabling 'Exploit protection' in Windows Security help prevent?

Answer: Memory-based exploits such as buffer overflows and heap spraying

Exploit protection applies DEP, ASLR, CFG, and other memory protections to processes to block common exploit techniques.