- Installing Windows 2000 Server
- Installing, Configuring, and Troubleshooting Access to Resources
- Configuring and Troubleshooting Hardware Devices and Drivers
- Managing, Monitoring, and Optimizing System Performance, Reliability, and Availability
- Managing, Configuring, and Troubleshooting Storage Use
- Configuring and Troubleshooting Windows 2000 Network Connections
- Implementing, Monitoring, and Troubleshooting Security
Implementing, Monitoring, and Troubleshooting Security
Great! You have your server up and running—now you can secure it. To pass the 70-215 exam, you need to be able to create local accounts, member servers, and some advanced policy configuration. As part of a secure environment you'll want to enable and configure auditing and have experience with EFS. This quiz will test your knowledge on this Windows 2000 Server exam objective.
Ned is the network administrator for Beatty Sausage Company. His network contains four Windows 2000 Servers acting as domain controllers, two Windows 2000 Servers acting as member servers, and 243 Windows 2000 Professional workstations. Ned hired a Windows 2000 consultant to install some specialty hardware for the server. The consultant needs administrative rights on the member server. Ned doesn't want to add the consultant to the Domain Admins. Is there anything that Ned can do to allow the consultant to complete the work without giving administrative rights to the entire domain?
- No. In a domain environment, all administrative rights stem from AD. Ned has to assign the consultant administrative rights to the domain.
- No. Ned has to assign the consultant administrative rights because the hardware the consultant is installing will likely affect all of the domain activities.
- Yes. Ned can assign the consultant to the local Administrators group on the member server.
- Yes. Ned can assign the consultant to the local Power Users group on the member server.
You are the network administrator for Ledbetter Writing Instruments Company. Your network consists of two Windows 2000 Servers acting as domain controllers and one Windows 2000 Server acting as a member server. Thomas, your supervisor, has just informed you that he is about to fire Todd, the company's accountant. Thomas also informs you that tomorrow a new accountant, Holly, will be joining the company and will need all of the same rights, permissions, and access to data that Todd has had. What is the best way to handle this situation?
- Delete Todd's account, and create a new account for Holly. Add Holly to all of the same groups that Todd was a member of.
- Disable Todd's account, and rename it Holly. Change the password to a temporary password, and require the new user to change it at the next logon.
- Copy Todd's account, and rename it to Holly. Delete Todd's account.
- Set Todd's logon hours to zero, and change his password so he cannot log on.
You are the network administrator for a small insurance company. Your domain consists of one Windows 2000 Server acting as a domain controller and one Windows 2000 Server acting as a member server. Cathy has just called to tell you that she forgot her password. What can you do to help Cathy?
- Open Active Directory Users and Computers, open Cathy's account, and tell her what her password is.
- Open Active Directory Users and Computers, open Cathy's account, and enter a new password for Cathy in the Password field.
- Open Active Directory Users and Computers, right-click Cathy's account, and Choose Properties. In the Password field, tell Cathy what her password is set to.
- Open Active Directory Users and Computers, right-click Cathy's account, and Choose Set Password. Enter a new password for Cathy, and have her log on with it.
You are the network administrator for an architectural firm. Your network has four Windows 2000 Servers acting as domain controllers and three Windows 2000 Servers acting as member servers. Your supervisor, Meredith, has asked that you create a method to control users' passwords. Currently, some users have blank passwords, others rarely change their passwords, whereas others use simple passwords such as their logon names. What method can you use to enforce password settings?
- You have to implement these settings in roaming profiles.
- You have to implement these settings in mandatory profiles.
- You have to implement these settings in local policies on each computer.
- You have to implement these settings through a domain password policy.
Shawn is the network administrator for Darr Enterprises. His network consists of three Windows 2000 Servers acting as domain controllers, two Windows 2000 Servers acting as member servers, and 435 Windows 2000 Professional workstations. Shawn suspects that some users are attempting to log on as other users to access data they ordinarily would not be privy to. Of the following choices, what can Shawn do to ensure that users can't continue to attempt to log on as others?
- He can turn on auditing to determine whether there are several logon attempts.
- He can turn on the Account Lockout feature to lock out accounts automatically after a set number of invalid attempts.
- He can turn on Password Complexity to ensure that passwords aren't guessed.
- He can turn on Password History to remember all of the guessed passwords.
Kerrie is the network administrator for Kreter Design Group, which deals with military designs and secretive information. Her network contains four Windows 2000 Servers acting as domain controllers, two Windows 2000 Servers as member servers, and 156 Windows 2000 Professional workstations. Her supervisor, Ruth, confided that someone may be attempting to access top-secret information on one of the servers. She has asked Kerrie to implement an ambiguous method of collecting any activity on the network. What method can Kerrie implement to track users' activities?
- Kerrie should implement Network Monitor in promiscuous mode.
- Kerrie should implement Network Monitor only on the server in which the top-secret information is stored.
- Kerrie should implement logon hours for all users, and track the activities of users outside of those set hours.
- Kerrie should create an audit policy.
You are the administrator of Donaldson Environmental Services. Your network consists of four Windows 2000 Servers, two of which are domain controllers. All of the clients in the network are using Windows 2000 Professional workstations. Your supervisor informs you that Gerry, a project manager, has left the company. All of the files Gerry owned need to be assigned to Frank. The files Gerry was in charge of were all in a folder called ENVOH on an NTFS partition. Which is the best method to assign the files to Frank?
- Assign Full Control of the files to Frank.
- Assign yourself Full Control of the files and then change the ownership to Frank.
- Take ownership of the file and then assign Frank the Take Ownership permission. Teach Frank how to take ownership.
- Assign Frank the Take Ownership permission. Instruct Frank on the process of taking ownership.
You are a consultant for Fischer Enterprises. Its network is a Windows 2000 domain with two Windows 2000 Servers as domain controllers and one Windows 2000 Server as a member server. Jim Fischer, the owner, has asked you to do a site inspection of the servers and security. You notice an immediate security flaw on all of the servers without even logging in. What is the flaw? (Choose all that apply.)
- The physical security of the server is easily compromised.
- The file system is FAT32.
- The logon screens include the last logon name.
- The servers are not auditing logons.
Franz is the network administrator for Gordon Consulting Services. His network has three Windows 2000 Servers acting as domain controllers, two Windows 2000 Servers member servers, and 192 Windows 2000 Professional workstations. Franz is interested in creating an audit policy for the entire domain, but is uncertain about where the results of the auditing will be stored. What is the correct location for the auditing results?
- Audit results are written to the secure.log file in the WINNT\SYSTEM32 folder.
- Audit results are written to the system log in Event Viewer.
- Audit results are written to the security log in Event Viewer.
- Audit results are written to the logging container in Sites and Services console.
You are the consultant for Davidson Research Corporation. Your network has three Windows 2000 Servers acting as domain controllers, two member servers, and 197 Windows 2000 Professional workstations. One of the member servers has very sensitive information that only a few people in the company are allowed to access. The client asked you to implement auditing on these resources to ensure their safety. You want to implement auditing, but you are concerned about auditing all events throughout the domain. What can you do to satisfy the client's request while ensuring that resources aren't taxed due to the auditing process?
- Nothing. Auditing is a domain-wide security policy.
- Nothing. Auditing records all activity from both users and systems.
- Enable auditing, and clear the security log often after saving the recordings.
- Enable auditing, but audit only Object Access: Failure.
Tommy is the network administrator of a Windows 2000 domain. His domain has three Windows 2000 Servers acting as domain controllers and three Windows 2000 Servers acting as member servers. Tommy suspects that his assistant, Jane, has been adding herself to different groups to gain access to confidential data. Jane is not a member of the Domain Admins, group but is an Account Operator. To test his suspicions, Tommy enabled auditing. Which is most likely to catch Jane adding her account to different groups?
- Account Logon
- Account Management
- Object Access
- Process Tracking
Fred has configured auditing on his Windows 2000 member server. He is concerned, however, that events may override older events in the Event Viewer. Of the following choices, which gives Fred the most assurance that newer activities won't override older ones?
- Overwrite events as needed
- Overwrite events older than 7 days
- Overwrite events older than 33 days
- Clear log manually