Exam 220-1102 topic 1 question 387 discussion

Restricing log-in times so the contractors can't log-in after hours when they are alone and enabling a screen lock in case users forget to log-off when they leave for the day makes sense to me.

It is specifically asking how to prevent computers from being accessed. A, B, C, and F do not have anything to do with accessing the computers. Restricting log-in times would prevent anyone from logging in during the night, enabling screen locks prevents issues with users leaving their devices turned on and logged in when leaving.

It should be B & D. autorun must be stop

D because restricting logon hours to only allowing logons at certain times so they aren’t able to access at night. E because if the screen is locked with a pin or password that the cleaning people don’t know then they won’t be able to access the computers.

While the other options (A, B, D, and E) are important security measures in general, they may not directly address the concern of contractors accessing the computers during their cleaning duties. Data-at-rest encryption, disabling AutoRun, restricting log-in times, and enabling a screen lock are more focused on protecting data and controlling system behavior but may not specifically prevent unsupervised access to computers by contractors.

D. Restricting log-in times: By limiting the time during which users, including contractors, can log in, you can prevent unauthorized access during off-work hours. F. Disabling local administrator accounts: Disabling local administrator accounts helps ensure that contractors cannot gain elevated privileges on the computer, providing an additional layer of security.