AuditUnit 4 · Topic 4.1
Device audit: which settings leave this laptop open?
Audit a laptop and find every setting that leaves it open.
New to this? Read the topic first: 4.1 Device Vulnerabilities and Attacks.
Simulation · [4.1.C.1, 4.1.C.3, 4.1.C.4, 4.1.C.5, 4.1.C.6, 4.1.C.7]
Device audit: which settings leave this laptop open?
You are auditing a laptop that a teacher uses for grades. Tap every setting that is a device vulnerability. There are 6.
-
Red flag. Unpatched software: exploits for known vulnerabilities can crash the system, spy on the user or take control.
-
Red flag. No BIOS or UEFI password: an adversary can boot from an external drive or into recovery mode and change accounts and passwords.
-
Red flag. Autorun runs whatever is on a plugged-in drive, including malware.
-
Fine. A short screen lock is a good setting.
-
Red flag. Open ports let an adversary connect to the device. A grades laptop does not need these listening.
-
Red flag. With no host-based firewall, malicious data cannot be filtered out.
-
Red flag. Devices without anti-malware are more vulnerable to malware installation.
-
Fine. Encryption protects the data if the laptop is stolen. Good.
Go to the topic: 4.1 Device Vulnerabilities and Attacks