A company wants to reduce the attack surface of its Windows workstations. The workstations are used only for word processing and email. Which action is the most effective for this goal?

Disable the Windows Firewall to improve network performance.

Set all user accounts to have administrative privileges to simplify software installation.

Enable Remote Desktop on all workstations so IT can provide support.

Uninstall or disable unnecessary services and features such as Windows Media Player and Internet Information Services (IIS).

An administrator notices that a user account has been locked out multiple times in a short period. The security logs show failed logon attempts from different IP addresses. What is the most likely explanation and the best immediate action?

The firewall is misconfigured; allow all inbound traffic to resolve the issue.

The user forgot their password; reset the password and inform the user.

The account is being targeted in a brute-force attack; temporarily disable the account and investigate the source IPs.

The antivirus is blocking the user's logon; update the antivirus.

A laptop contains confidential client files. The laptop is used on the go and has been lost before. The company wants to ensure that if the laptop is stolen, the data cannot be read. Which control is the most important to implement?

Set NTFS permissions so only the user account can access the files.

Create a backup of the files to a USB drive and keep it in the laptop bag.

Enable BitLocker Drive Encryption on the system drive.

Set a BIOS password to prevent the laptop from booting.

Why is it important to secure an operating system?

To increase the speed of the processor

To automatically update all software without user consent

To prevent unauthorized access and protect data from threats

To eliminate the need for antivirus software

Why is it important to apply security patches to an operating system?

To make the system compatible with all hardware

To fix known vulnerabilities that could be exploited by attackers

To add new features that are not necessary for security

To increase the system's processing speed

EC-CouncilCertified Secure Computer User

Domain 1Objective 2

Securing Operating Systems CSCU Practice Questions (Page 1)

Part of the Data and Operating System Security domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

12concepts

Questions 1–5

1application · medium
A company wants to reduce the attack surface of its Windows workstations. The workstations are used only for word processing and email. Which action is the most effective for this goal?
Select an answer first
2expert · hard
An administrator notices that a user account has been locked out multiple times in a short period. The security logs show failed logon attempts from different IP addresses. What is the most likely explanation and the best immediate action?
Select an answer first
3application · medium
A laptop contains confidential client files. The laptop is used on the go and has been lost before. The company wants to ensure that if the laptop is stolen, the data cannot be read. Which control is the most important to implement?
Select an answer first
4foundation · easy
Why is it important to secure an operating system?
Select an answer first
5foundation · easy
Why is it important to apply security patches to an operating system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.