Which account is disabled in the Secure Default Accounts lab?

Which account is disabled in the Secure Default Accounts lab?

• A. Admin
• B. Guest
• C. Service
• D. User

Answer: (B)

Disabling unnecessary default accounts reduces the system’s attack surface. The Guest account is designed for temporary, anonymous access and often lacks strong authentication or auditing, making it a common target for misuse. By turning it off, you prevent anonymous logons and improve traceability, which is why it’s disabled in the Secure Default Accounts lab. The other accounts are kept or configured for legitimate use with proper controls.

Disabling unnecessary default accounts reduces the system’s attack surface. The Guest account is designed for temporary, anonymous access and often lacks strong authentication or auditing, making it a common target for misuse. By turning it off, you prevent anonymous logons and improve traceability, which is why it’s disabled in the Secure Default Accounts lab. The other accounts are kept or configured for legitimate use with proper controls.