Windows security configuration in Cybersecurity - Mini Project: Build & Apply

Windows Security Configuration Basics

📖 Scenario: You are a new IT support technician tasked with setting up basic security settings on a Windows computer to protect it from common threats.

🎯 Goal: Learn how to configure essential Windows security settings step-by-step, including setting up a firewall rule, enabling automatic updates, and configuring user account control.

📋 What You'll Learn

Create a dictionary to hold Windows security settings with exact keys and values

Add a configuration variable to specify the security level

Use a loop to update settings based on the security level

Add a final confirmation flag to complete the configuration

💡 Why This Matters

🌍 Real World

IT technicians and system administrators often configure Windows security settings to protect computers from threats and ensure compliance with company policies.

💼 Career

Understanding how to manage and automate Windows security configurations is essential for roles in IT support, cybersecurity, and system administration.

1

Create initial Windows security settings dictionary

Create a dictionary called security_settings with these exact entries: 'firewall_enabled': False, 'auto_updates': False, 'user_account_control': 'low'.

Cybersecurity

# Create the security_settings dictionary with specified keys and values
# Your code here

Hint

Use curly braces to create a dictionary and separate keys and values with colons.

2

Add security level configuration variable

Create a variable called security_level and set it to the string 'high'.

Cybersecurity

security_settings = {
    'firewall_enabled': False,
    'auto_updates': False,
    'user_account_control': 'low'
}
# Set the security_level variable to 'high'
# Your code here

Hint

Assign the string 'high' to the variable named security_level.

3

Update security settings based on security level

Use a for loop with variable setting to iterate over the keys of security_settings. Inside the loop, if security_level is 'high', set security_settings[setting] to True for 'firewall_enabled' and 'auto_updates', and set security_settings['user_account_control'] to 'high'.

Cybersecurity

security_settings = {
    'firewall_enabled': False,
    'auto_updates': False,
    'user_account_control': 'low'
}
security_level = 'high'
# Use a for loop to update security_settings based on security_level
# Your code here

Hint

Loop over the dictionary keys and update values based on the security_level variable.

4

Add final confirmation flag to complete configuration

Add a new key 'configuration_complete' to security_settings and set its value to True.

Cybersecurity

security_settings = {
    'firewall_enabled': False,
    'auto_updates': False,
    'user_account_control': 'low'
}
security_level = 'high'
for setting in security_settings:
    if security_level == 'high':
        if setting in ['firewall_enabled', 'auto_updates']:
            security_settings[setting] = True
security_settings['user_account_control'] = 'high'
# Add 'configuration_complete' key with value True
# Your code here

Hint

Add a new key-value pair to the dictionary to mark configuration as complete.

Practice

1. Which Windows feature helps protect your computer by monitoring and blocking unauthorized access?

easy

A. Task Manager

B. Windows Firewall

C. Disk Cleanup

D. File Explorer

Solution

1. Step 1: Understand the purpose of Windows Firewall

   Windows Firewall monitors incoming and outgoing network traffic to block unauthorized access.

2. Step 2: Compare with other options

   Disk Cleanup removes unnecessary files, Task Manager manages running processes, and File Explorer helps browse files, none provide security protection.

3. Final Answer:

   Windows Firewall -> Option B

4. Quick Check:

   Firewall = Blocks unauthorized access [OK]

Hint: Firewall controls network access to protect your PC [OK]

Common Mistakes:

• Confusing Firewall with Disk Cleanup
• Thinking Task Manager provides security
• Assuming File Explorer manages security

2. Which of the following is the correct way to open the Windows Security app using the keyboard?

easy

A. Press Ctrl + Alt + Delete

B. Press Windows key + I

C. Press Windows key + S and type 'Windows Security'

D. Press Alt + F4

Solution

1. Step 1: Identify how to open Windows Security app

   Pressing Windows key + S opens search; typing 'Windows Security' launches the app.

2. Step 2: Review other shortcuts

   Ctrl + Alt + Delete opens security options screen, Windows key + I opens Settings, Alt + F4 closes windows.

3. Final Answer:

   Press Windows key + S and type 'Windows Security' -> Option C

4. Quick Check:

   Search + type app name = Open Windows Security [OK]

Hint: Use Windows + S then type app name to open it fast [OK]

Common Mistakes:

• Pressing Ctrl + Alt + Delete instead of searching
• Using Windows + I which opens Settings, not Security
• Pressing Alt + F4 which closes windows

3. What will happen if you disable real-time protection in Windows Security?

medium

A. Malware scanning will not run automatically

B. User accounts will be deleted

C. Firewall will block all network traffic

D. Your computer will stop receiving Windows updates

Solution

1. Step 1: Understand real-time protection role

   Real-time protection scans files and programs as they run to detect malware immediately.

2. Step 2: Effects of disabling it

   Disabling stops automatic scanning, increasing risk of infections. It does not affect updates, firewall, or user accounts.

3. Final Answer:

   Malware scanning will not run automatically -> Option A

4. Quick Check:

   Real-time off = No automatic malware scan [OK]

Hint: Real-time protection = automatic malware scanning [OK]

Common Mistakes:

• Thinking updates stop when real-time protection is off
• Confusing firewall behavior with real-time protection
• Believing user accounts get deleted

4. You tried to set a password policy in Group Policy Editor but it did not apply. What is a common reason for this failure?

medium

A. You edited the wrong Group Policy Object

B. You used a weak password

C. You did not restart the computer after changes

D. You disabled Windows Firewall

Solution

1. Step 1: Understand Group Policy scope

   Password policies apply only if set in the correct Group Policy Object (GPO) linked to the target users or computers.

2. Step 2: Identify common mistakes

   Restarting helps but is not always required; weak passwords are rejected but do not prevent policy application; disabling firewall unrelated.

3. Final Answer:

   You edited the wrong Group Policy Object -> Option A

4. Quick Check:

   Correct GPO = Policy applies [OK]

Hint: Always edit the right Group Policy Object for changes [OK]

Common Mistakes:

• Forgetting to link GPO to correct user/computer
• Assuming restart always needed
• Confusing firewall with password policy

5. You want to enforce a strong password policy that requires at least 12 characters, including uppercase, lowercase, numbers, and symbols. Which Windows tool should you use to configure this for all users in a company domain?

hard

A. Windows Firewall advanced settings

B. Windows Defender Antivirus settings

C. Local Security Policy on each computer

D. Group Policy Management Console (GPMC)

Solution

1. Step 1: Identify tool for domain-wide policy

   Group Policy Management Console (GPMC) manages policies across all domain computers and users centrally.

2. Step 2: Compare other options

   Local Security Policy affects only one computer; Windows Defender controls antivirus, not passwords; Firewall manages network traffic.

3. Final Answer:

   Group Policy Management Console (GPMC) -> Option D

4. Quick Check:

   Domain-wide password policy = GPMC [OK]

Hint: Use GPMC for company-wide password policies [OK]

Common Mistakes:

• Trying to set policy on each PC manually
• Confusing antivirus settings with password rules
• Using firewall settings for password enforcement