How it works
A single device is exposed through weak authentication, out-of-date software, unnecessary services, and careless wireless settings. Hardening means closing what is not needed.
Apply updates, use strong authentication, turn off what you do not use, and prefer secure wireless settings. Then confirm the device still does the job it is there to do.
Common error
A control that blocks legitimate work will be turned off by the person it inconveniences, which leaves you worse off than before.
Worked example
A shared laptop has pending updates, a shared administrator login, and an unused remote-access service. Prioritize a practical hardening plan.
Evidence
Updates: pending
Daily account: administrator
Remote-access service: unusedApply approved updates during a planned window, provide individual standard accounts for routine use, and disable the unused service. Preserve a controlled maintenance path. Verify the required classroom applications after changes so security settings do not silently break instruction.
Exercises
1.4.1
Explain why replacing the password on a shared administrator account does not fully solve accountability problems.
Show solution
The account still represents several people, so its activity cannot be reliably attributed to one user. Use individual accounts and restrict administrative privileges to approved maintenance.
1.4.2
Name a verification check after disabling an unused network service.
Show solution
Confirm the service is no longer listening or accepting connections, then confirm required applications still work. Record the approved configuration and rollback option.