Windows Local Security Configuration (A+1202)
By completing this lab, you will be able to:
- Configure and manage Windows Defender Antivirus settings
- Implement Windows Firewall with Advanced Security rules
- Create and modify local security policies
- Configure encryption using EFS
- Create and manage local user accounts with appropriate permissions
- Configure User Account Control (UAC) settings
- Apply principle of least privilege to user accounts
- Configure Windows Update settings for security patches
- Implement file and folder permissions using NTFS
- Set up audit policies for security monitoring
- Configure system restore and backup options
Policy Implementation
- Implement local Group Policy settings
- Monitor security events and logs
- Apply security baselines for different environments
- Document security configurations
- Troubleshoot common security issues
- Maintain compliance with security standards
Overview
This hands-on lab provides comprehensive practice in configuring and managing Windows local security settings—essential skills for IT professionals and CompTIA A+ certification candidates. Covering objectives from both the 220-1101 and 220-1102 exams, you'll develop proficiency in:
- Windows security configuration and hardening
- User account and permission management
- System protection and encryption implementation
- Security policy configuration and enforcement
Through guided exercises, you'll master both GUI and command-line techniques while learning industry best practices for securing Windows systems in professional environments.
Key terms and descriptions
Windows Defender
Built-in antivirus and anti-malware solution in Windows
Windows Firewall
Network security system that monitors and controls network traffic
User Account Control (UAC)
Security feature that prevents unauthorized system changes
Local Security Policy
Settings that control security behavior on a local computer
New Technology File System (NTFS) permissions
File system permissions controlling access to files and folders
Encrypting File System (EFS)
File encryption feature built into NTFS
Password policy
Rules governing password complexity and usage
Account lockout policy
Settings that lock accounts after failed login attempts
Windows Update
Service for downloading and installing security patches
Security baseline
Standard security configuration for systems
Principle of least privilege
Security concept of minimal necessary permissions