Security and Authentication Flashcards

Which Windows 10 feature provides full-disk encryption to protect data on laptops if they are lost or stolen?

Answer: BitLocker Drive Encryption

BitLocker encrypts entire volumes to protect data at rest, requiring a PIN, USB key, or TPM for pre-boot authentication.

What hardware component stores the BitLocker encryption keys and measures boot integrity on modern Windows 10 devices?

Answer: TPM (Trusted Platform Module)

The TPM chip securely stores BitLocker keys and validates the boot environment to detect tampering.

A user receives a UAC prompt when trying to install an application. What is the purpose of User Account Control (UAC)?

Answer: To prevent unauthorized changes to the OS by requiring elevation approval for administrative actions

UAC prompts users to confirm or provide admin credentials before allowing operations that could affect system integrity.

Which Windows Defender feature monitors processes in real time and blocks known malicious code from executing?

Answer: Real-time protection

Real-time protection continuously scans files, programs, and processes as they run, blocking known malware immediately.

Which Windows 10 feature restricts which applications can modify files in protected folders, defending against ransomware?

Answer: Controlled Folder Access

Controlled Folder Access is part of Windows Defender Exploit Guard and blocks unauthorized apps from changing files in protected folders.

What is the primary purpose of Windows Defender Credential Guard?

Answer: Isolates credential hashes and tokens in a virtualized container to prevent pass-the-hash attacks

Credential Guard uses virtualization-based security to protect NTLM hashes and Kerberos tickets from theft.