Security and Authentication Flashcards

Which Windows 10 Pro feature allows administrators to control which applications users are allowed to run using publisher, path, or hash rules?

Answer: AppLocker

AppLocker lets administrators define rules that allow or deny execution of applications based on file attributes.

What is the purpose of Windows Defender SmartScreen?

Answer: Warns users about or blocks unrecognized apps and malicious websites

SmartScreen checks downloaded files and websites against a cloud-based reputation database and warns users about suspicious content.

Which Windows 10 feature runs Microsoft Edge in an isolated Hyper-V container to contain browser-based attacks?

Answer: Windows Defender Application Guard

Application Guard launches Edge in a hardware-isolated Hyper-V container so malicious websites cannot access the host OS.

A user's Windows 10 PC must comply with a policy requiring the screen to lock after 5 minutes of inactivity. Where is this configured?

Answer: Settings > Personalization > Lock screen > Screen saver settings

The screen saver settings include a 'On resume, display logon screen' option tied to a wait time that enforces screen lock.

Which audit policy should be enabled to track successful and failed logon attempts on a standalone Windows 10 PC?

Answer: Audit logon events

Enabling 'Audit logon events' records successful and failed interactive, network, and service logon attempts in the Security event log.

What is a 'recovery key' in the context of BitLocker?

Answer: A 48-digit numerical key used to unlock a BitLocker-encrypted drive when normal authentication fails

The BitLocker recovery key is a 48-digit code generated during encryption setup that unlocks the drive if the TPM or PIN fails.