Windows XP Pro Risk Assessment & Management 4

Question 1

A risk assessment identifies that Windows XP Pro machines do not apply patches regularly. Which built-in feature best mitigates this risk?

Accepted Answer

Automatic Updates

Answer

Automatic Updates ensures that security patches are downloaded and applied on a schedule, reducing the window of exposure to known vulnerabilities.

Question 2

When quantifying risk, the formula Asset Value × Threat Likelihood × Vulnerability Level is used to calculate which value?

Accepted Answer

Risk Score

Answer

A risk score is calculated by combining the asset value, the likelihood of a threat occurring, and the degree of vulnerability, giving a prioritization metric.

Question 3

On a Windows XP Pro system, which action MOST reduces the risk associated with default administrative shares (e.g., C$, ADMIN$)?

Accepted Answer

Disable the Server service or restrict access via firewall rules

Answer

Disabling the Server service or blocking SMB ports via the firewall prevents remote access to hidden administrative shares, eliminating this attack vector.

Question 4

A Windows XP Pro risk assessment recommends implementing a 'clean desk' policy. Which type of threat does this PRIMARILY address?

Accepted Answer

Social engineering and physical information theft

Answer

A clean desk policy reduces the risk of sensitive information being read or stolen by unauthorized individuals who have physical access to the workspace.

Question 5

Which Windows XP Pro security feature encrypts the credentials stored in the Security Accounts Manager (SAM) database?

Accepted Answer

Syskey

Answer

Syskey (System Key) applies an additional layer of encryption to the SAM database, protecting password hashes from offline extraction attacks.

Windows XP Pro Practice Test

Windows XP Pro Practice Test

Windows XP Pro Risk Assessment & Management 4