Question 1

Which of the ff. is the single best rule to enforce when designing complex passwords?

Accepted Answer

longer passwords

Question 2

For users on your network, you want to automatically lock their user accounts if four incorrect passwords are used within 10 minutes. What should you do?

Accepted Answer

configure account lockout policies in group policy

Question 3

You want to make sure that all users have passwords over 8 character and that passwords must be changed every 30 days. What should you do?

Accepted Answer

Configure account policies in Group policy

Question 4

You have hired 10 new temporary workers who will be with the company for 3 months. You want to make sure that these users can only log on during regular business hours. What should you do?

Accepted Answer

configure time and day restrictions

Question 5

You are configuring the local security policy of a Windows 7 system. You want to prevent users from reusing old passwords. You also want to force them to use a new password for at least 5 days before changing it again. Which policies should you configure? (Select two.)

Accepted Answer

enforce password history; minimum password age

Question 6

You are configuring the local security policy of a Windows 7 system. You want to require users to create passwords that are at least 10 characters long. You also want to prevent logon after three unsuccessful logon attemps. Which policies should you configure? (Select two.)

Accepted Answer

minimum password length; account lockout threshold

Question 7

You have just configured the password policy and set the minimum password age to 10. What will be the effect of this configuration?

Accepted Answer

User cannot change the password for 10 days

Question 8

You have implemented lockout with a clipping level of 4. What will be the effect of this setting?

Accepted Answer

the account will be locked for 4 incorrect attempts

Question 9

Which of the ff. is not important aspect of password management?

Accepted Answer

enable account lockout

Question 10

You are teaching new users about security and passwords. Which example of the passwords would be the most secure password?

Accepted Answer

T1a73gZ9!

Question 11

Upon running a security audit in your organization, you discover that several sales employees are using the same domain user account to log in and update the company\'s customer database. Which action should you take? (2)

Accepted Answer

Delete the account that the sales employees are currently using.  Train some employees to use their own accounts to update the customer database

Question 12

You manage a single domain named widgets.com. Organizational units (OUs) have been created for each company department. User and computer accounts have been moved into their corresponding OUs. You define a password and account lockout policy for the domain. However, members of the Directors OU want to enforce longer passwords than are required for the rest of the users. You need to make the change as easily as possible. What should you do???????

Accepted Answer

implement a granular password policy for the users in the Directors OU

Question 13

You manage a single domain named widgets.com. Organizational units (OUs) have been created for each company department. User and computer accounts have been moved into their corresponding OUs. You define a password and account lockout policy for the domain. However, members of the Directors OU want to enforce longer passwords than are required for the rest of the users. You would like to define a granular password policy for these users. Which tool should you use?

Accepted Answer

ADSI edit

Question 14

You manage a single domain named widgets.com. Organizational units (OUs) have been created for each company department. User and computer accounts have been moved into their corresponding OUs. You define a password and account lockout policy for the domain. However, members of the Directors OU want to enforce longer passwords than are required for the rest of the users. You need to make the change as easily as possible. What should you do?

Accepted Answer

create a granular password policy. apply the policy to all users in the director\'s OU

Question 15

Yo manage a single domain named widgets.com. Organizational units (OUs) have been created for each company department. User and computer accounts have been moved into their corresponding OUs. Members of the Directors OU want to enforce longer passwords than are required for the rest of the users. You define a new granular password policy with the required settings. All users in the Directors OU are currently members of the DirectorsGG group, a global security group in that OU. You apply the new password policy to that group. Matt Barnes is the chief financial officer. He would like his account to have even more strict password policies than is required for other members of the Directors OU. What should you do?

Accepted Answer

create a granular password policy for Matt. apply the new policy directly to Matt\'s user account.

Question 16

Which of the following are methods for providing centralized authentication, authorization, and accounting for remote access?

Accepted Answer

TACACKS+, Radius

Question 17

You have decided to implement a remote access solution that uses multiple remote access servers. You want to implement RADIUS to centralize remote access authentication and authorization.  Which of the following would be a required part of your configuration?

Accepted Answer

configure the remote access servers as RADIUS clients

Question 18

Which of the following are characteristics of TACACS +?

Accepted Answer

allows for a possible of three different servers, one for each authentication, authorization, and account; uses TCP

Question 19

Which of the following are differences between RADIUS and TACACS+?

Accepted Answer

Radius combines authentication and authorization into a single function. TACAS+ allows these services to be split between different servers.

Question 20

Which of the ff. protocols can be used to centralize remote access authentication?

Accepted Answer

TCACS

Question 21

RADIUS is primarily used for what purpose?

Accepted Answer

authenticating remote clients before access to the network is granted

Question 22

Which of the ff. is a characteristic of TACACS+?

Accepted Answer

it encrypts the entire packet, not just authentication packets

Question 23

Which of the ff. ports are used with TACACS?

Accepted Answer

49

Question 24

What does a remote access server use for authorization?

Accepted Answer

Remote access policies

Question 25

Which of the ff. is the best example of remote access authentication?

Accepted Answer

user establishes a dialup connection to a server to gain access to shared resources

Question 26

Which of the following is a feature of MS-CHAP v2 that is not included in CHAP

Accepted Answer

Mutual authentication

Question 27

CHAP performs which of the following security functions?

Accepted Answer

periodically verifies the identity of a peer using a three-way handshake

Question 28

Which of the following authentication protocols transmits passwords in clear text, and is therefore considered too insecure for modern networks

Accepted Answer

PAP

Question 29

Which remote access authentication protocol periodically and transparently re-authenticates during logon session by default

Accepted Answer

CHAP

Question 30

which of the following authentication protocols uses a three-way handshake to authenticate users to the network? (choose 2)

Accepted Answer

MS-CHAP & CHAP

Question 31

When using Kerberos authentication, which of the following terms is used to describe the token that verifies the identity of the user to the target system?

Accepted Answer

ticket

Question 32

Which of the following are used when implementing Kerberos for authentication and authorization? (Select Two)

Accepted Answer

ticket granting server; time synchronization

Question 33

Which of the ff. are requirements to deploy Kerberos on a network? (Select two.)

Accepted Answer

A centralized database of users and password, Time synchronization between devices

Question 34

Which ports does LDAP use by default? (Select two.)

Accepted Answer

389 & 636

Question 35

You want to deploy SSL to protect authentication traffic with you LDAP-based directory service. Which port would this use?

Accepted Answer

636

Question 36

Your LDAP directory service solution uses simple authentication. What should you always do when using simple authentication?

Accepted Answer

Use SSL

Question 37

You want to use Kerberos to protect LDAP authentication. Which authentication mode should you choose?

Accepted Answer

SASL

Question 38

A user has just authenticated using Kerberos. What object is issued to the user immediately following logon?

Accepted Answer

ticket granting ticket

Question 39

What protocol uses port 88?

Accepted Answer

kerberos

Question 40

Which of the ff. authentication mechanisms is designed to protect a 9-character password from attacks by hashing the first seven characters into a single hash and then hashing the remaining two characters into another separate hash?

Accepted Answer

LANMAN

Question 41

what is mutual authentication?

Accepted Answer

A process by which each party in an online communication verifies the identity of the other party

Question 42

A manage has told you she is concerned about her employees writing their passwords for Web sites, network files, and databases resources on sticky notes. Your office runs exclusively in a Windows environment.  Which tool could be used to prevent this?

Accepted Answer

credential manager

Question 43

KWalletManger is a Linux based credential management system that stores encrypted account credentials for network resources.  Which encryption methods can KWalletManager use to secure account credentials?(Two)

Accepted Answer

blowfish & GPG

Question 44

You want to protect the authentication credentials you use to connect to the LAB server in your network by copying them to a USB drive.  What option would you hit?

Accepted Answer

back up credentials

Question 45

In an identity Management System, what is the function of the Authoritative Source?

Accepted Answer

specify the owner of a data item

Question 46

In an identity Management System, what is the function of the Identity Vault?

Accepted Answer

ensure that each employee has the appropriate level of access in each system

Question 47

You are the network administrator for a small company. Your organization currently uses the following server systems:  â¢ A Windows server that functions as a domain controller and a file server.  â¢ A Novell Open Enterprise Server that functions as a GroupWise e-mail server.  â¢ A Linux server that hosts your organization\'s NoSQL database server that is used for big data analysis.      Because each of these systems uses its own unique set of authentication credentials, you must spend a considerable amount of time each week keeping user account information updated on each system.In addition, if a user changes his or her password on one system, it is not updated for the user\'s accounts on the other two systems.

Accepted Answer

implement an identity vault. implement password synchronization

2.11 ; 2.15 Practice Questions – Flashcards

Unlock all answers in this set

Haven't found what you were looking for?

Search for samples, answers to your questions and flashcards