Cybersecurity · Intermediate level

Intermediate level · Module 2: System Hardening and Access Management · Lesson 1 of 3

Secure Configuration

Reduce what an attacker can use on each computer.

In this lesson you will

  • Apply a hardening checklist
  • Remove unnecessary software and services

Key concepts

attack surfacesecure baselineunneeded softwaremacro and script settings

The lesson

Every program and service adds possible weaknesses. Hardening removes what is not needed and sets secure defaults.

A baseline checklist covers: updates on, protection on, firewall on, disk encryption on, unneeded software removed, Office macros from the internet blocked, auto-run disabled and a screen lock policy.

Record the baseline so every new computer is set up the same way.

Step by step

  1. Run through the hardening checklist.
  2. Remove unneeded software.
  3. Check macro and auto-run settings.
  4. Record the result.

Practice activity

Harden the lab computer and record the baseline.

Expected result: A computer that passes the baseline checklist.

Check your understanding

  1. What is attack surface?

    Show answer

    Everything an attacker could try to use, such as services, software and accounts.

  2. Why record a baseline?

    Show answer

    So every computer is configured consistently.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.