Question

You are the IT security administrator for a small corporate network. You are performing vulnerability scans on your network. Mary is the primary administrator for the network and the only person authorized to perform local administrative actions. The company network security policy requires complex passwords for all users. It is also required that Windows Firewall is enabled on all workstations. Sharing personal files is not allowed.

In this lab, your task is to:

Run a vulnerability scan for the Office2 workstation using the Security Evaluator on the taskbar.

Remediate the vulnerabilities found in the vulnerability report on Office2 as follows:

Rename the Administrator account.

Disable the Guest account.

Set the password for the Mary account to expire.

Require a strong password for the Mary account.

Unlock the Susan account.

Remove the Susan account from the Administrators group.

Turn on Windows Firewall for all profiles.

Remove the file share on the MyMusic folder.

Re-run a vulnerability scan to make sure all of the issues are resolved

Answer 1

To run a vulnerability scan for the Office2 workstation, you can use the Security Evaluator tool on the taskbar. The Security Evaluator scans the system for vulnerabilities and reports on any security weaknesses found.

Once you have run the vulnerability scan, you will need to remediate any vulnerabilities found. Here are the steps you can take to address the issues mentioned in the lab:

Rename the Administrator account - Change the name of the built-in Administrator account to something other than "Administrator".

Disable the Guest account - Disable the built-in Guest account.

Set the password for the Mary account to expire - Set the password for the Mary account to expire after a specified time period.

Require a strong password for the Mary account - Configure the Mary account to require a strong password, which includes a combination of uppercase and lowercase letters, numbers, and special characters.

Unlock the Susan account - Unlock the user account named Susan.

Remove the Susan account from the Administrators group - Remove the Susan account from the Administrators group and assign her a standard user account instead.

Turn on Windows Firewall for all profiles - Enable the Windows Firewall for all network profiles, including public, private, and domain.

Remove the file share on the MyMusic folder - Disable file sharing on the MyMusic folder and restrict access to authorized users only.

After completing the remediation steps, you can run another vulnerability scan to ensure that all issues have been resolved.

Step-by-step explanation: