70-214 Set 3

Front 1

What free tool does Microsoft provide to check event logs for multiple servers in a domain?

Back 1

EventCombMT

Front 2

What tunneling protocols does Windows 95 support?

Back 2

PPTP (with the Windows Dial-Up Networking 1.3 Performance and Security Upgrade for Windows 95)

Front 3

What tunneling protocols does Windows 98 support?

Back 3

PPTP

Front 4

What tunneling protocols does NT 3.51 support?

Back 4

none

Front 5

What tunneling protocols does NT 4.0 support?

Back 5

PPTP

Front 6

What tunneling protocols does Windows 2000 support?

Back 6

PPTP and L2TP

Front 7

What is the highest-level authentication protocol supported by Windows 2000?

Back 7

EAP

Front 8

What is the highest authentication protocol supported by NT 4.0?

Back 8

MS-CHAPv2 (with SP4 or higher)

Front 9

What is the highest-level authentication protocol supported by Windows 98?

Back 9

MS-CHAPv2 (with SP1 or higher)

Front 10

What is the highest-level authentication protocol supported by Windows 95?

Back 10

MS-CHAPv2 (with Windows Dial-Up Networking 1.3 Performance and Security Upgrade for Windows 95)

Front 11

What character-length passwords does MS-CHAPv1 support?

Back 11

up to 14 characters

Front 12

In a native-mode network, what controls remote-access permissions?

Back 12

Group Policy

Front 13

In a native-mode network, what are the remote-access permissions on each user account set to?

Back 13

Control Access Through Remote Access Policy

Front 14

In a mixed-mode network, what is the remote-access permission on each user account set to?

Back 14

Allow Access

Front 15

When logging on to a Terminal Server running in Remote Administration mode, what is indicated by the message "you do not have access to logon to this session"?

Back 15

the account being used does not have administrative privileges

Front 16

What is the purpose of the Connection Manager Administration Kit?

Back 16

to create dial-up connections to distribute to users

Front 17

What additional installation requirement does an enterprise CA have that other CA's do not?

Back 17

Active Directory must be present

Front 18

What URL is used to request a certificate via Web Enrollment?

Back 18

http://server_name/certsrv

Front 19

What are the seven pre-configured reasons for certificate revocation?

Back 19

Unspecified; Key Compromise; CA Compromise; Change of Affiliation; Superseded; Cease of Operation; Certificate Hold

Front 20

What is the best way to back up and restore a CA?

Back 20

back up the entire System Store of the CA server

Front 21

What are KMS-issued keys used for?

Back 21

email security

Front 22

When a KMS-issued key is recovered, how is the user notified?

Back 22

by email

Front 23

What is a System Access Control List?

Back 23

a list which specifies which events are to be audited per user or group

Front 24

What folder are IIS logs stored in by default?

Back 24

%systemroot%\System32\Logfilesm

Front 25

When dealing with Active Directory database updates, what is the name for the replication type used for security-sensitive changes, such as account lockout?

Back 25

Urgent Replication

Front 26

What is NTLM used for?

Back 26

authenticating clients unable to use Kerberos (NT4 and below)

Front 27

What DLL controls the NTLM authentication protocol?

Back 27

Msv1_0.dll

Front 28

What DLL controls SSL?

Back 28

Schannel.dll

Front 29

What does the LSA server service do?

Back 29

enforces defined security policies within Active Directory

Front 30

Why is the SAM not present on domain controllers?

Back 30

the SAM control local security accounts, which are not allowed on domain controllers

Front 31

What DLL controls the Directory Service module?

Back 31

ntdsa.dll

Front 32

What three things does the Directory Service module control?

Back 32

replication between Windows 2000 domain controllers; LDAP access to Active Directory; management of naming contexts stored in Active Directory

Front 33

What DLL controls the Multiple Authentication Provider?

Back 33

Secur32.dll

Front 34

What does the Multiple Authentication Provider do?

Back 34

supports all security packages available on the system

Front 35

What ability is provided by secure channel (SChannel) services?

Back 35

the ability to authenticate via public key -based protocols, such as SSL and TLS

Front 36

What requirement exists for File System settings to be defined in a security template?

Back 36

file system must be NTFS

Front 37

What file can be modified to alter registry values when combined with a security template?

Back 37

sceregvl.inf

Front 38

When is a Kerberos referral ticket issued?

Back 38

when a user attempts to connect to a server in a different domain

Front 39

What kind of extensions does Kerberos use to support smart cards?

Back 39

PKINIT extensions

Front 40

What three OS clients can use Kerberos authentication in a Windows 2000 domain?

Back 40

2000; XP; and UNIX

Front 41

Why are DHCP servers normally made members of the DNSUpdate Proxy global group?

Back 41

in order to allow DNS record updating for legacy clients

Front 42

How is the RunAs option enabled on a shortcut menu?

Back 42

hold Shift while right-clicking the shortcut

Front 43

How is a service ticket obtained?

Back 43

the ticket-granting ticket is presented to the KDC, which grants the service ticket

Front 44

Who grants a ticket-granting ticket?

Back 44

the Key Distribution Center (KDC)

Front 45

Why is deploying security templates harder in a workgroup than in a domain?

Back 45

Group Policy can't be used to distribute them

Front 46

How are security-sensitive changes within Active Directory replicated?

Back 46

they are immediately replicated to all domain controllers within the site

Front 47

What does the Netlogon service do?

Back 47

maintains a computer's secure channel to a domain controller