Windows security configuration in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding User Account Control (UAC) in Windows

What is the primary purpose of User Account Control (UAC) in Windows security configuration?

A To encrypt all files on the system to protect against unauthorized access

B To automatically update all installed software without user intervention

C To prevent unauthorized changes by prompting for permission or administrator credentials

D To disable all network connections when suspicious activity is detected

💡 Hint

Think about how Windows controls changes that could affect system security.

User Account Control (UAC) helps prevent unauthorized changes by asking for permission or administrator credentials before allowing actions that could affect the system.

📋 Factual

intermediate

Windows Firewall Default Behavior

By default, what does the Windows Firewall do when it detects an incoming connection that is not explicitly allowed?

A Allows the connection without notification

B Automatically creates a rule to allow the connection

C Redirects the connection to a safe network zone

D Blocks the connection and notifies the user

💡 Hint

Consider how firewalls protect your computer from unknown network traffic.

Windows Firewall blocks incoming connections that are not allowed by existing rules and typically logs the event; it does not always notify the user by default.

🔍 Analysis

advanced

Effect of Disabling Windows Defender Antivirus

What is the most likely consequence of disabling Windows Defender Antivirus without installing another antivirus program?

A The system becomes vulnerable to malware and viruses without real-time protection

B The system will automatically block all suspicious files without scanning

C Windows will prevent all software installations to protect the system

D The system performance will improve significantly with no security risks

💡 Hint

Think about what antivirus software does to protect your computer.

Disabling Windows Defender removes real-time scanning and protection, leaving the system exposed to malware unless another antivirus is installed.

❓ Comparison

advanced

Comparing Windows Security Policies: Local vs Group Policy

Which statement best describes the difference between Local Security Policy and Group Policy in Windows security configuration?

A Local Security Policy applies settings to a single computer, while Group Policy can apply settings across multiple computers in a domain

B Local Security Policy is managed by network administrators, Group Policy is managed by individual users

C Group Policy only controls user interface settings, Local Security Policy controls network settings

D Local Security Policy requires internet connection, Group Policy works offline

💡 Hint

Consider the scope of control for each policy type.

Local Security Policy affects only the local machine, while Group Policy allows administrators to manage settings for many computers in a network domain.

❓ Reasoning

expert

Impact of Incorrect NTFS Permissions Configuration

If a user mistakenly grants 'Full Control' permission to 'Everyone' on a sensitive folder in NTFS, what is the most serious security risk?

A Only administrators can access the folder despite the permission change

B Any user can read, modify, delete, or change permissions of files in that folder

C The folder becomes hidden and inaccessible to all users

D The system automatically encrypts the folder to protect it

💡 Hint

Think about what 'Full Control' means for all users.

Granting 'Full Control' to 'Everyone' allows any user to fully manage the folder, risking data loss, unauthorized changes, or security breaches.

Practice

1. Which Windows feature helps protect your computer by monitoring and blocking unauthorized access?

easy

A. Task Manager

B. Windows Firewall

C. Disk Cleanup

D. File Explorer

Solution

1. Step 1: Understand the purpose of Windows Firewall

   Windows Firewall monitors incoming and outgoing network traffic to block unauthorized access.

2. Step 2: Compare with other options

   Disk Cleanup removes unnecessary files, Task Manager manages running processes, and File Explorer helps browse files, none provide security protection.

3. Final Answer:

   Windows Firewall -> Option B

4. Quick Check:

   Firewall = Blocks unauthorized access [OK]

Hint: Firewall controls network access to protect your PC [OK]

Common Mistakes:

• Confusing Firewall with Disk Cleanup
• Thinking Task Manager provides security
• Assuming File Explorer manages security

2. Which of the following is the correct way to open the Windows Security app using the keyboard?

easy

A. Press Ctrl + Alt + Delete

B. Press Windows key + I

C. Press Windows key + S and type 'Windows Security'

D. Press Alt + F4

Solution

1. Step 1: Identify how to open Windows Security app

   Pressing Windows key + S opens search; typing 'Windows Security' launches the app.

2. Step 2: Review other shortcuts

   Ctrl + Alt + Delete opens security options screen, Windows key + I opens Settings, Alt + F4 closes windows.

3. Final Answer:

   Press Windows key + S and type 'Windows Security' -> Option C

4. Quick Check:

   Search + type app name = Open Windows Security [OK]

Hint: Use Windows + S then type app name to open it fast [OK]

Common Mistakes:

• Pressing Ctrl + Alt + Delete instead of searching
• Using Windows + I which opens Settings, not Security
• Pressing Alt + F4 which closes windows

3. What will happen if you disable real-time protection in Windows Security?

medium

A. Malware scanning will not run automatically

B. User accounts will be deleted

C. Firewall will block all network traffic

D. Your computer will stop receiving Windows updates

Solution

1. Step 1: Understand real-time protection role

   Real-time protection scans files and programs as they run to detect malware immediately.

2. Step 2: Effects of disabling it

   Disabling stops automatic scanning, increasing risk of infections. It does not affect updates, firewall, or user accounts.

3. Final Answer:

   Malware scanning will not run automatically -> Option A

4. Quick Check:

   Real-time off = No automatic malware scan [OK]

Hint: Real-time protection = automatic malware scanning [OK]

Common Mistakes:

• Thinking updates stop when real-time protection is off
• Confusing firewall behavior with real-time protection
• Believing user accounts get deleted

4. You tried to set a password policy in Group Policy Editor but it did not apply. What is a common reason for this failure?

medium

A. You edited the wrong Group Policy Object

B. You used a weak password

C. You did not restart the computer after changes

D. You disabled Windows Firewall

Solution

1. Step 1: Understand Group Policy scope

   Password policies apply only if set in the correct Group Policy Object (GPO) linked to the target users or computers.

2. Step 2: Identify common mistakes

   Restarting helps but is not always required; weak passwords are rejected but do not prevent policy application; disabling firewall unrelated.

3. Final Answer:

   You edited the wrong Group Policy Object -> Option A

4. Quick Check:

   Correct GPO = Policy applies [OK]

Hint: Always edit the right Group Policy Object for changes [OK]

Common Mistakes:

• Forgetting to link GPO to correct user/computer
• Assuming restart always needed
• Confusing firewall with password policy

5. You want to enforce a strong password policy that requires at least 12 characters, including uppercase, lowercase, numbers, and symbols. Which Windows tool should you use to configure this for all users in a company domain?

hard

A. Windows Firewall advanced settings

B. Windows Defender Antivirus settings

C. Local Security Policy on each computer

D. Group Policy Management Console (GPMC)

Solution

1. Step 1: Identify tool for domain-wide policy

   Group Policy Management Console (GPMC) manages policies across all domain computers and users centrally.

2. Step 2: Compare other options

   Local Security Policy affects only one computer; Windows Defender controls antivirus, not passwords; Firewall manages network traffic.

3. Final Answer:

   Group Policy Management Console (GPMC) -> Option D

4. Quick Check:

   Domain-wide password policy = GPMC [OK]

Hint: Use GPMC for company-wide password policies [OK]

Common Mistakes:

• Trying to set policy on each PC manually
• Confusing antivirus settings with password rules
• Using firewall settings for password enforcement