This chapter is from the book
This chapter is from the book
This chapter is from the book
Answers and Explanations
Answers: A, B, and C.
Explanation A. You need to select the Advanced (Custom Settings) security option to get things started.
Answer: C. Select the Advanced (Custom Settings) option. On the Advanced Security Settings tab, clear all check boxes except the MS-CHAP v2 (Microsoft Challenge Handshake Authentication Protocol Version 2) check box.
Answer: D. You should configure the local security settings to enable the user to format and eject removable media.
Answer: A. You must open the security properties for Microsoft Internet Explorer on Amy's computer. Add www.parkerresearch.com to the Trusted Sites list. Finally, clear the Require Server Verification for All Sites in This Zone check box.
Answer: D. On Kate's computer, you need to add a trusted certificate. Open Internet Explorer's list of certificates. Import a copy of the certificate used by the intranet.loftwareinc.com server into Kate's Trusted Publishers certificates store.
Answer: C. A configuration adjustment by a network admin is needed. Ask a network administrator to modify the Domain Security Policy by adding the .dcp file type to the File Not Caching domain group policy.
Answer: B. On a domain controller, you must use the Local Computer Policy Microsoft Management Console (MMC) to add Jane's domain user account to the Add Workstations to Domain user right policy.
Answer: D. You should create a folder named C:\Files. Move the Secure.ini file to the C:\Files folder. Instruct the user of each computer to open the properties of the C:\Files folder and select the option to encrypt the contents of the folder. Accept the default settings on the Confirm Attributes Changes dialog box. Configure Payroll to use the C:\Files\Secure.ini files.
Answer: A. You need to set the privacy configuration for first-party cookies to Accept.
Answer: B. You should grant Allow-Print permission to the ITAdmins group. Also, grant the Allow-Manage Documents and Allow-Manage Printers permissions to your and Steve's user accounts.
Answer: D. You should log on as a local administrator on Paul's computer. In the properties of the My Documents folder, change the Target folder location to Paul's home directory.
Answer: C. To examine a Windows XP Professional PC to find out whether a custom policy is affecting the correct location in the Registry, run the GPResult.exe command.
Answer: B. Use the Security Configuration and Analysis console to create a new security template that modifies file permissions on AppLibrary.dll. Use the Active Directory group policy to import and then apply the template to all 800 Windows XP Professional computers.
Answer: C. An object is a distinct named set of attributes that represent a network resource, such as a user or computer account. An example would be JSmith or Printer05.
Answer: B. A class is a logical grouping of objects, such as computers, accounts, domains, or OUs (organizational units).
Answer: C. OU stands for organizational unit, which is a container used to organize objects of a domain into logical administrative groups. An example would be the SalesOU, which would be functionally equivalent to a sales department, having users, computers, and printers.
Answer: D. A domain holds all network objects and information only about all objects it contains. A domain is considered a security boundary. In Microsoft Windows XP, security settings do not cross from one domain to another.
Answer: C. A tree is a hierarchical grouping, like a pyramid structure, of one or more Microsoft Windows XP domains that share a contiguous (similar, touching) namespace. An example would be eITprep.com, sales.eITprep.com, and products.eITprep.com.
Answer: D. A forest is a hierarchical grouping, like a pyramid structure, of one or more Microsoft Windows XP domain trees that have different namespaces. An example would be eITprep.com and sales.eITprep.com, connected over to AudioWhiz.com and products.AudioWhiz.com.
Answer: A. A site is a geographical grouping of one or more IP (Internet Protocol) subnets connected by high-speed links. An example would be a Microsoft Windows XP single domain with sites in Sacramento, San Francisco, and Los Angeles, California.
Answer: A. The schema contains a formal definition of contents and structure of Active Directory, such as classes, class properties, and attributes. Examples of each of these items would be User, Firstname, and John.
Answer: B. The Global Catalog is a central repository of information about all objects in an entire forest. The Global Catalog maintains a subset of attributes for each and every single object in the entire forest to help with searches.
Answer: C. DN stands for distinguished name. The distinguished name of an object uniquely identifies it within the entire Active Directory forest.
Answer: D. RDN stands for relative distinguished name. The relative distinguished name is a portion of the full distinguished name. The RDN identifies an object only within a single domain.
Answer: E. GUID stands for globally unique identifier. The globally unique identifier is a unique 128-bit character string assigned to objects when they are created in Active Directory. The GUID of an object never changes, even if the object is renamed or moved.
Answer: D. UPN stands for user principal name. The user principal name is the common, friendly name given to a user account that looks like an email address. An example would be AnneJohnson@ABCompany.com.
Answer: A. The Administrators built-in local group can perform all administrative tasks on the local system. The built-in Administrator account is a member of this group by default.
Answer: B. The Backup Operators built-in local group can use Microsoft Windows XP Backup to back up and restore data on the local computer.
Answer: C. The Guests built-in local group can be used for granting temporary access to resources. This is a very limited account.
Answer: D. The Power Users built-in local group can create and modify local user accounts on the local computer, share resources, install programs, and install device drivers.
Answer: E. The Remote Desktop Users built-in local group can log on locally through the Remote Desktop Connection.
Answer: C. The Users built-in local group can perform everyday tasks for which they have been assigned permissions. All new accounts added to a Microsoft Windows XP computer are added to this account.
Answer: A. The Authenticated Users Microsoft Windows XP built-in system group includes all users and computers whose identities have been authenticated. Authenticated Users does not include the Guest account.
Answer: B. The Batch Microsoft Windows XP built-in system group includes all users who have logged on through a batch facility such as Task Scheduler.
Answer: C. The Creator Group Microsoft Windows XP built-in system group is a placeholder in an inheritable ACE (access control entry).
Answer: D. The Dialup Microsoft Windows XP built-in system group includes all users who are logged in through a dial-up connection.
Answer: E. The Everyone Microsoft Windows XP built-in system group includes authenticated users and guests.
Answer: B. The Interactive Microsoft Windows XP built-in system group includes all users logging on locally or through a remote desktop connection.
Answer: C. The Local System Microsoft Windows XP built-in system group is a service account that is used by the operating system.
Answer: D. The Service Microsoft Windows XP built-in system group includes all security principals that have logged on as a service. Membership in the Service group is controlled by the operating system.
Answer: E. The Terminal Server Users Microsoft Windows XP built-in system group includes all users who have logged on to a Terminal Services server that uses Terminal Services version 4.0 application compatibility mode.
Answers: A, B, and E.
Explanation A. GPedit.msc is the replacement for the POLEdit.exe used in earlier Windows versions. GPedit.msc is the snap-in for the Microsoft console.
Explanation B. Group policies can be stored locally.
Explanation E. Group policies can be stored in Active Directory.
Answer: A. Compatws.inf is a compatibility template, also referred to as the Basic template. It sets up permissions for local users group so that legacy programs are more likely to run. Compatws.inf is not considered secure.
Answer: B. Securews.inf is a more secure template in regards to account policy and auditing. It removes all members from the Power Users group, but ACLs (access control lists) are not modified. Securews.inf is considered somewhat secure.
Answer: C. Hisecws.inf is a highly secure template provided for Microsoft Windows XP workstations running in native mode only. It requires all network communications to be digitally signed and encrypted. Hisecws.inf changes the ACLs (access control lists) to give Power Users the ability to create shares and change the system time.
Answer: D. Rootsec.inf applies the default settings to the root of the system drive that Microsoft Windows XP was originally installed with. Rootsec.inf does not override settings that have been changed, and is therefore considered not secure.
Answers: A, B, C, and E.
Explanation A. EFS (Encrypting File System) is only available on NTFSv5 (New Technology File System version 5) partitions.
Explanation B. EFS is transparent to the end user.
Explanation C. EFS uses public key encryption.
Explanation E. EFS has an appointed recovery system agent who can open the files as well.
Answers: B and C.
Explanation B. EFS stands for Encrypting File System. Copy the file as normal and it will become unencrypted.
Explanation C. Move the file as normal and it will become unencrypted.
Answers: C and D.
Explanation C. Move the file as normal and it will become unencrypted.
Explanation D. EFS stands for Encrypting File System. Copy the file as normal and it will become unencrypted.
Answers: A and C.
Explanation A. EFS stands for Encrypting File System. Copy the file as normal and it will remain encrypted.
Explanation C. Move the file as normal and it will remain encrypted.
Answers: A and C.
Explanation A. Move the file as normal and it will remain encrypted.
Explanation C. EFS stands for Encrypting File System. Copy the file as normal and it will remain encrypted.
Answers: A and D.
Explanation A. When working with a Microsoft Windows XP computer in a workgroup, user password hints dramatically lower security.
Explanation D. When working with a Microsoft Windows XP computer in a workgroup, user password hints are visible to all users.
Answer: A. You should create a password reset disk for Steve. Click Start, Settings, Control Panel, User Accounts, Related Tasks, Prevent a Forgotten Password. This will start the Forgotten Password Wizard. Any newly created password reset disk will invalidate older disks.
Explanation B. Select the Maximum Strength Encryption item from the data encryption list. This is required in this situation.
Explanation C. Smart Cards require you to select the Extensible Authentication Protocol (EAP) option, and select Smart Card or other Certificate from the EAP list. Remember Smart Cards means EAP.