True/False
Indicate whether the sentence or statement is true
or false.
|
|
|
1.
|
Security settings that are applied using Group Policy will always override local
settings.
|
|
|
2.
|
You
may use the Secedit.exe command-line tool to manually update GPO settings on your
computer.
|
|
|
3.
|
New
security templates are not preconfigured with any security-related settings.
|
|
|
4.
|
The
Account Policies node includes configuration settings that are typically the initial step to securing
the computer network.
|
|
|
5.
|
When
configuring the account policy for use by computers in an Active Directory domain, the GPO that
contains the security template settings must be linked to a domain object.
|
|
|
6.
|
Secedit.exe is a command-line tool that cannot be used to apply security
templates.
|
|
|
7.
|
Secedit.exe contains eight main switches.
|
|
|
8.
|
Older
Windows NT 4 systems did not provide adequate tools or utilities to implement and manage an effective
network security policy.
|
|
|
9.
|
You
can import the settings found in a security template to a Group Policy Object (GPO) in Active
Directory.
|
|
|
10.
|
To
apply a Security Policy template to a domain or organizational unit (OU) object in Active
Directory, you can use the Active Directory Users and Computers snap-in.
|
Multiple Choice
Identify the
letter of the choice that best completes the statement or answers the question.
|
|
|
11.
|
What
are the tools used for creating and maintaining security configurations across the network
called? a. | management
utilities | c. | security
management utilities | b. | SecTools | d. | Security Configuration Manager tools | | | | |
|
|
|
12.
|
Which
of the following does not exist in Windows Server 2003? a. | security
templates | b. | Secedit command-line tool | c. | Security
Configuration and Analysis snap-in | d. | security customization wizard | | |
|
|
|
13.
|
After
installation, the default security template for a Windows Server 2003 machine is stored in a template
called ____. a. | Security.inf | c. | Setup.inf | b. | Setup Security.inf | d. | Security Setup.inf | | | | |
|
|
|
14.
|
Which
of the following is not a standard incremental template provided with Windows Server
2003? a. | Hisecws.inf | c. | Rootdc.inf | b. | Rootsec.inf | d. | Compatws.inf | | | | |
|
|
|
15.
|
Security templates can be applied to the local machine or to the domain via a(n)
____.
|
|
|
16.
|
Group
policy security settings are updated every ____ minutes for servers and
workstations.
|
|
|
17.
|
New
security templates are configured with how many security-related settings?
|
|
|
18.
|
Which
of the following is not a password policy setting? a. | enforce password
history | b. | minimum password age | c. | store password
using reversible encryption | d. | password must meet simplicity
requirements | | |
|
|
|
19.
|
Which
of the following is not a Kerberos policy setting? a. | maximum lifetime
for client ticket | c. | maximum lifetime
for user ticket | b. | maximum lifetime for service
ticket | d. | enforce user
logon restrictions | | | | |
|
|
|
20.
|
Which
of the following is a command-line tool used to create and apply security templates? a. | securityedit | c. | secedit | b. | editsec | d. | secconfig | | | | |
|
|
|
21.
|
Which
of the following is a command-line tool used to analyze security settings? a. | secanalyze | c. | secedit | b. | editsec | d. | secconfig | | | | |
|
|
|
22.
|
Security templates are ____ - based files. a. | encryption | c. | system | b. | text | d. | stream | | | | |
|
|
|
23.
|
GPO
is commonly called which of the following? a. | Security Policy template | c. | Machine-based Security template | b. | Account Security
template | d. | Domain Policy
template | | | | |
|
|
|
24.
|
The
Security Configuration Manager tools are designed to make the implementation of security policy
____. a. | user
independent | c. | easier | b. | incremental | d. | more secure | | | | |
|
|
|
25.
|
The
security templates provided with Windows Server 2003 are stored in which of the following
directories? a. | C:\WINDOWS\templates\security | c. | C:\WINDOWS\inf | b. | C:\WINDOWS\sec\templates | d. | C:\WINDOWS\security\templates | | | | |
|
|
|
26.
|
Which
of the following is (are) account lockout policy setting(s)? a. | reset account
lockout counter after | c. | account lockout
duration | b. | account lockout threshold | d. | all of the above | | | | |
|
|
|
27.
|
Which
of the following is a node available for a security template? a. | Local
Audits | c. | Registry | b. | Event Options | d. | Restricted File System | | | | |
|
|
|
28.
|
A
security baseline template contains a set of security settings that define the ____ security settings
that must be applied to a computer. a. | maximum | c. | pre-Windows 2000 | b. | most
relaxed | d. | minimum | | | | |
|
|
|
29.
|
Which
of the following secedit.exe switches is used to generate a security template that saves the current
security settings of a system? a. | GenerateRollback | c. | validate | b. | export | d. | analyze | | | | |
|
|
|
30.
|
The
version of secedit.exe shipped with Windows Server 2003 no longer provides which of the following
switches? a. | quiet | c. | verbose | b. | refreshpolicy | d. | configure | | | | |
|