IS3340 CHAPTER 11

Question 1

A special mode that allows administrators to created an offline copy of Active Directory is called ___?

Answer 1

DIRECTORY SERVICE RESTORE MODE (DSRM)

Question 2

A rule that handles addressing and encapsulating is called ___?

Answer 2

ENCAPSULATING PROTOCOL

Question 3

The process of making configuration changes and deploying controls to reduce the attack surface is called ___?

Answer 3

HARDENING

Question 4

A solution that defines and implements a policy that describes the requirements to access your network is called ___?

Answer 4

NETWORK ACCESS CONTROL (NAC)

Question 5

An open source utility used to scan one or more computers or network devices for open ports and other information is called ___?

Answer 5

Nmap

Question 6

A general approach to handling encryption keys using trusted entities and digital certificates; the hardware, software, policies, and procedures to manage all aspects of digital certificates is called ___?

Answer 6

PUBLIC KEY INFRASTRUCTURE (PKI)

Question 7

A predefined set of services, programs, and configuration settings that enable a computer to fulfill a specific set of requirements is called ___?

Answer 7

ROLES

Question 8

A Microsoft utility that provides guidance to administrators and creates policies based on the least privilege principle for the server roles you have selected either during installation or afterward using the server Manager Utility is called ___?

Answer 8

SECURITY CONFIGURATION WIZARD (SCW)

Question 9

A Windows Server 2008 R2 installation option that provides a minimal environment that only includes programs necessary for the roles you select is called ___?

Answer 9

SERVER CORE INSTALLATION

Question 10

A technique that creates a virtual encrypted connection and allow applications to use any protocol to communicate with servers and services without having to worry about addressing or privacy concerns is called ___?

Answer 10

TUNNELING

Question 11

1. The term ATTACK SURFACE refers to all of the software a computer runs that is vulnerable to attack.
   TRUE OR FALSE

Answer 11

TRUE

Question 12

2. The best way to secure a service is to disable it.

TRUE OR FALSE

Answer 12

FALSE

Question 13

3. The process of making configuration changes and deploying controls to reduce the attack surface is called ___?

Answer 13

Hardening

Question 14

4. Which Windows Server 2008 R2 feature allows you to specify which services you want to include during the operating system installation?
5. Edition
6. Role
7. GPO
8. Configuration

Answer 14

Role

Question 15

5. Which Windows Server 2008 R2 installation option only includes a minimal environment to just run selected services?
6. Server core
7. Foundation
8. Standard
9. Runtime

Answer 15

Server core

Question 16

6. Which Microsoft tool guides administrators and creates policies based on least privilege to reduce the attack surface of a windows server after installation?
7. GPO
8. MBSA
9. SCW
10. NMAP

Answer 16

SCW

Question 17

7. You can use GPOs to reply Windows firewall rules.

TRUE OR FALSE

Answer 17

TRUE

Question 18

8. Which of the following actions is the best action to take to secure an unneeded service?
9. Close the port
10. Disable the service
11. Delete the service from Services
12. Create a GPO restriction for the service

Answer 18

Disable the service

Question 19

9. You should disable the ___ user account to make it harder for attackers to access the default escalated-privilege account.

Answer 19

Administrator

Question 20

10. AD makes securing many computers in a network more complex.
    TRUE OR FALSE

Answer 20

FALSE

Question 21

11. The ___ tool is a handy open source tool to scan computers for open ports.

Answer 21

Nmap

Question 22

12. Which term describes software that defines and implements a policy that describes the requirements to access your network?
13. SCW
14. VPN
15. GPO
16. NAC

Answer 22

NAC

Question 23

13. VPNs increase security of remote connection by guaranteeing all traffic is encrypted.
    TRUE OR FALSE

Answer 23

FALSE

Question 24

14. Which new Microsoft VPN protocol makes it easy to use VPNs even through firewalls?
15. L2TP
16. SSTP
17. TLS
18. TCP

Answer 24

SSTP

Question 25

15. ___ refers to the hardware, software, policies, and procedures to manage all aspects of digital certificates.

Answer 25

PKI