Hands-On Microsoft Windows Server 2008 - Chapter 10

Front 1

What are Rights Management Services (RMS)?

Back 1

RMS is security that goes beyond ACL's and Windows Firewall. It is used to safeguard information for files such as MS Office or email.

Front 2

What role is necessary to implement RMS?

Back 2

Active Directory Rights Management Services (AD RMS)

Front 3

What is the difference between assigning and publishing applications?

Back 3

Applications that are assigned appear on a user's desktop, and are installed after being opened.

Applications that are published are available for installation from the distribution server, through a group policy.

Front 4

(T/F) A group policy can only be set for an OU.

Back 4

False, group policies can be set for sites, domains, OU's, and local computers

Front 5

(T/F) The default domain policy is inherited by all child domains.

Back 5

True

Front 6

(T/F) In the event of a conflict, the group policy for computers override the policies set for for users.

Back 6

True

Front 7

What is the default authentication method for Active Directory?

Back 7

Kerberos

Front 8

What features prevents the user from modifying system files, while still allowing them to install software and device drivers?

Back 8

User Account Control (UAC)

Front 9

What is NTMLv2 and what does it stand for?

Back 9

Windows NT LAN Manager version 2, and authentication protocol that comes default with WS2008

Front 10

How do IPSec and NAP prevent non-compliant devices from compromising network security?

Back 10

All devices on the network must send a Statement of Health (SoH) to the Health Registration Authority (HRA) server

Front 11

The _____ authentication method uses a _____ ticket

Back 11

Kerberos, service

Front 12

What tool allows you to lock down communications through specific ports and protocols?

Back 12

Windows Firewall

Front 13

What feature can be implemented to prevent attackers from guessing passwords?

Back 13

Account Lockout (duration, threshold, count)

Front 14

How can an administrator import security templates and apply them to a Domain?

Back 14

Using the Security Configuration and Analysis Snap-In

Front 15

What does the command "cipher /s" do?

Back 15

Encrypt the current folder, AND contents of subfolders

Front 16

What is the purpose of a remediation server?

Back 16

A server that non-compliant clients can be quarantined in until they are updated and compliant

Front 17

(T/F) A security policy can be implemented to ensure that age, length and complexity of passwords are governed

Back 17

True

Front 18

What are two advantages of AES?

Back 18

AES is fast and strong

Front 19

Why should auditing be used sparingly?

Back 19

Audits add lines to the Security event log that can grow very large, and the service can use up system resources.

Front 20

List three events that can be audited through Audit Policies:

Back 20

1. Account login/logout

2. Account Management

3. Directory Access

4. Object Access

5. Policy changes/Privilege Use

6. Process Tracking

7. System Events

Front 21

(T/F) IPSec can be used to secure TCP/IP communication such as FTP/HTTP/HTTPS etc;

Back 21

True

Front 22

What tool is used to configure NAT when securing a WS2008 server?

Back 22

Routing and Remote Access Services Tool