Chapter 10 - Mcts Guide To Microsoft Windows Server 2008 Network Infrastructure Configuration

Front 1

Which of the following allows administrators to create and manage security profiles?

Back 1

Security Configuration Wizard

Front 2

This tool allow administrators to view security and update information for multiple network machine?

Back 2

Microsoft Baseline Security Analyzer*

*via Security Update Scan Results

Front 3

Which of the following cannot be performed with the Security Configuration Wizard?

Back 3

Encrypting folders and files

Front 4

True or False: You can configure the Microsoft Baseline Security Analyzer to install all missing Windows security updates.

Back 4

False*

*they can be only downloaded

Front 5

Which of these features of Windows Server 2008 allows you to encrypt the entire system volume on a hard drive?

Back 5

Bitlocker

Front 6

The _________________ is used to access an EFS-encrypted file.

Back 6

File Encryption Key

Front 7

What type of network profile would be applied to a workgroup server that sits on a network protected from the Internet by a firewall?

Back 7

Public

Workgroup

Private

Domain

Front 8

Which of the following tools can be used for managing IPSec policies?

Back 8

Netsh.exe

WFAS
IP Security Policy snap-in
GPME (Active Directory)

*used to perform WFAS and IP Security Policy tasks, as well as other advanced configs

Front 9

Which of the following is not a threat mitigated by IPSec?

Back 9

Data Tampering

Social Engineering

Network Traffic Sniffing

Identity Spoofing

Front 10

True or False: Transport Mode is used to set up VPN connections for remote access clients in Windows Server 2008.

Back 10

False

Front 11

McClantz, Inc, a small publishing company, needs to install client to client IPsec to secure communications between a web server and a database server. The network is running Active Directory Domain Services without a PKI infrastructure. They are running Windows Server 2008 and do not want to have to purchase anything additional to implement their solution. What is the recommended authentication method this implementation?

Back 11

Kerberos version 5

*ideal because of the lack of a PKI and all devices are in the same forest. Otherwise, use Digital Certificates, or Preshared Keys

Front 12

Whichof the following commands will encrypt the folder, f:\Shared\SecureData:

Back 12

Cipher.exe /E f:\Shared\SecureData

*\E encrypt, \D decrypt

Front 13

Which of the following cannot be enforced by NAP?

Back 13

EFS file encryption

Front 14

Youhave a small workgroup environment with two servers, SRV1 and SRV2. SRV1 is a web server hosting a financial application used by your endusers. SRV2 is a database server used to store the financialapplication's data. Both servers have digital certificates issued byThawte. You need to use IPSec to secure the communication betweenSRV1 and SRV2. However, you want to utilize only components that arebuilt-in to Windows Server 2008. Which of the following actions willmake up part of the solution (Choose 2)

Back 14

Create a Server-to-Server policy in Windows Firewall with Advanced Security.

Choose Digital Certificates for Phase 1 authentication

Front 15

True or False: Authentication Header (AH) security services is the preferred method for securing IPSec traffic as it provides encryption of a data packet's payload.

Back 15

False

*it is Encapsulating Security Payload (ESP)

Front 16

Whichof the following are supported by default in Windows Server 2008(Choose 2)

Back 16

Encapsulating Security Payload (ESP)

NTLMv1 Authentication

Authentication Header (AH)

NTLMv2 Authentication

LAN Manager (LM) Authentication

Front 17

In a NAP environment, a centralized Anti-Virus servers would be an example of a ________________.

Back 17

Remediation Server

Front 18

_______________ mode is used when implementing IPSec between two gateways.

Back 18

Tunnel

Front 19

IPSec is implemented at this layer of the OSI model?

Back 19

Physical

Data Link

Network

Transport

Presentation

Application

Front 20

Using Bitlocker with a Trusted Protection Module (TPM) and PIN is referred to as

Back 20

enhanced security mode

Front 21

What is the difference between Encrypting File Service (EFS) and Bitlocker?

Back 21

BitLocker encrypts the entire filesystem, not just file-folder level