Workstation hardening: data-at-rest encryption, password policy, end-user best practices (screensaver locks, logging off), account management, disable AutoRun/AutoPlay, disable guest account

Hardening means reducing a system's attack surface: turning off what is not needed, locking down what is, and making the remaining features as secure as possible. Workstations are a prime target because users sit at them all day, open email, browse the web and plug in devices, so the A+ exam covers a standard hardening checklist. Each item answers a specific risk, and exam questions usually describe the risk and ask for the matching control.