Lab 6: Auditing the Workstation Domain for Compliance
Question 1 – What are some common risks, threats, vulnerabilities commonly found in the Remote Access Domain that must be mitigated through a layered security strategy?
a. Some common risks, threats, or vulnerabilities are company laptop stolen, software keyloggers being put on computers and having passwords and user accounts stolen, data leakage, and unauthorized access to the network.
Question 2 – File-sharing utilities and client-to-client communication applications can provide the ability to share files with other users (i.e. Peer-to-Peer networking or Sharing). What risk and/or vulnerabilities are introduced with these applications?
a. A lot of these are shared through clear text. If a user uses the same password for logging into one of these utilities as they do for their network login or any other data sensitive login the password can be easily compromised.
Question 3 – Explain how confidentiality can be achieved within the Workstation Domain with security controls and security countermeasures.
a. You can achieve this by using GPO’s and WMI filters. This will help push Workstation security policies to the computers such as if the computer is idle for more than 5 minutes it locks, or access to different parts of the computer like control panel are blocked.
Question 4 – Explain how data integrity can be achieved within the Workstation Domain with security controls and security countermeasures.
a. Security controls and countermeasures help to ensure that only authorized people can access and change data. You can do this through Access Control List (ACL’s).
Question 5 – Explain how availability can be achieved within the Workstation Domain with security controls and countermeasures.
a. This can achieved by have up to date backups of the data. This way it can be restored if needed. Also having a