Windows security configuration in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding User Account Control (UAC) in Windows

What is the primary purpose of User Account Control (UAC) in Windows security configuration?

A To encrypt all files on the system to protect against unauthorized access

B To automatically update all installed software without user intervention

C To prevent unauthorized changes by prompting for permission or administrator credentials

D To disable all network connections when suspicious activity is detected

💡 Hint

Think about how Windows controls changes that could affect system security.

User Account Control (UAC) helps prevent unauthorized changes by asking for permission or administrator credentials before allowing actions that could affect the system.

📋 Factual

intermediate

Windows Firewall Default Behavior

By default, what does the Windows Firewall do when it detects an incoming connection that is not explicitly allowed?

A Allows the connection without notification

B Automatically creates a rule to allow the connection

C Redirects the connection to a safe network zone

D Blocks the connection and notifies the user

💡 Hint

Consider how firewalls protect your computer from unknown network traffic.

Windows Firewall blocks incoming connections that are not allowed by existing rules and typically logs the event; it does not always notify the user by default.

🔍 Analysis

advanced

Effect of Disabling Windows Defender Antivirus

What is the most likely consequence of disabling Windows Defender Antivirus without installing another antivirus program?

A The system becomes vulnerable to malware and viruses without real-time protection

B The system will automatically block all suspicious files without scanning

C Windows will prevent all software installations to protect the system

D The system performance will improve significantly with no security risks

💡 Hint

Think about what antivirus software does to protect your computer.

Disabling Windows Defender removes real-time scanning and protection, leaving the system exposed to malware unless another antivirus is installed.

❓ Comparison

advanced

Comparing Windows Security Policies: Local vs Group Policy

Which statement best describes the difference between Local Security Policy and Group Policy in Windows security configuration?

A Local Security Policy applies settings to a single computer, while Group Policy can apply settings across multiple computers in a domain

B Local Security Policy is managed by network administrators, Group Policy is managed by individual users

C Group Policy only controls user interface settings, Local Security Policy controls network settings

D Local Security Policy requires internet connection, Group Policy works offline

💡 Hint

Consider the scope of control for each policy type.

Local Security Policy affects only the local machine, while Group Policy allows administrators to manage settings for many computers in a network domain.

❓ Reasoning

expert

Impact of Incorrect NTFS Permissions Configuration

If a user mistakenly grants 'Full Control' permission to 'Everyone' on a sensitive folder in NTFS, what is the most serious security risk?

A Only administrators can access the folder despite the permission change

B Any user can read, modify, delete, or change permissions of files in that folder

C The folder becomes hidden and inaccessible to all users

D The system automatically encrypts the folder to protect it

💡 Hint

Think about what 'Full Control' means for all users.

Granting 'Full Control' to 'Everyone' allows any user to fully manage the folder, risking data loss, unauthorized changes, or security breaches.