7.2 Flashcards

1
Q

What is an object-oriented, interactive command environment with scripting language features?

A

Windows PowerShell (PS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What cmdlet and variable do you use to obtain the current PS version?

A

Get-Host and $PSVersionTable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What PS cmdlet gives a complete list of aliased commands and their associated PS cmdlet?

A

Get-Alias

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

dir is an alias for what ps cmdlet?

A

Get-ChildItem

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the PS cmdlet to list the available cmdlets?

A

Get-Command

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the PS command to see all of the arguments for a given cmdlet?

A

Get-Help

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What parameter will show specific examples for a cmdlet in PS?

A

-examples

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are small commands used within PS called?

A

cmdlets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What cmdlet is used to show all of the available verbs in PS?

A

Get-Verb

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What parameter is used to state the name of an object, i.e. a user name, cmdlet name, path name?

A

-name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What parameter is used to state the system name or IP you want the action performed on?

A

-computername

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What parameter is used to state the path for a directory?

A

-Path

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What defines additional information associated with a parameter name?

A

Arguments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What parameter and argument is used when navigating the filesystem to specify path to traverse?

A

-Path C:\Windows

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What parameter and argument is used with Import-Module and specifies the name of the module that you wish to import?

A

-Name ActiveDirectory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What defines the process of passing the results of one cmdlet as input into a second cmdlet?

A

Pipeline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are packages of PS commands, consisting of cmdlets, functions, variables, and aliases?

A

Modules

18
Q

What defines a way for the OS and its services and applications to record important actrions, post status messages, and track security events?

A

Logging

19
Q

What is the command line tool that enables auditing?

A

auditpol

20
Q

What defines the tracking of changes?

A

Auditing

21
Q

What three logs are always available?

A

Application Log, System Log, and Security Log

22
Q

Where does 5.* Windows architectures store log files?

A

%SystemRoot%\system32\config

23
Q

Where does 6.* Windows architectures store log files at?

A

%SystemRoot%\system32\winevt\logs

24
Q

What logs will a domain controller typically have?

A

Directory Service Log, File Replication Log, and DNS Server Log

25
Q

What is a vast heirarchical repository of operating system (OS), hardware, applications, and user settings that is referred to as the heart and soul of the OS?

A

Windows Registry

26
Q

At what time is the registry read?

A

Boot process, application startup, and User Login

27
Q

What is the primary tool for viewing and editing the Registry?

A

regedit.exe

28
Q

What is the primary tool for viewing and editing the Registry?

A

regedit.exe

29
Q

What type of key contains all the user settings and all the computer settings respectively?

A

Master key

30
Q

What are the two master keys?

A
  • HKEY_USERS (HKU)*
  • HKEY_LOCAL_MACHINE (HKLM)*
31
Q

What types of key are linked to key within the two master keys; and what are they?

A

Derived

  • HKEY_CLASSES_ROOT (HKCR)
  • HKEY_CURRENT_USER (HKCU)
  • HKEY_CURRENT_CONFIG (HKCC)
32
Q

What are used to identify additional object attributes?

A

Parameters

33
Q

What defines an internal command that is associated with a PS cmdlet that provides a similar output?

A

Aliases

34
Q

Which Security Audit trigger happens when changes to user rights, Windows Firewall, GPOs, audit, or trust policies occur?

A

Policy Change

35
Q

Which Security Audit trigger happens when an object (e.g., file, folder, etc.) is accessed that has a System Access Control List (SACL)?

A

Object Access

36
Q

Which Security Audit trigger happens when a user exercises a user right or privilege?

A

Privilege Use

37
Q

Which Security Audit trigger happens when programs activate, processes exit, and object are accessed indirectly?

A

Process Tracking (Detailed Tracking)

38
Q

Which Security Audit trigger happens when computer security events such as restart, shutdown, or clearing the vent log occur?

A

System

39
Q

Which Security Audit trigger happens when accounts are created, deleted, or which user accounts are modified?

A

Account Management

40
Q

Which Security Audit trigger happens when logon attempts occur?

A

Logon

41
Q

Which Security Audit trigger happens when network-based access to computer and attempts connect to shares are made?

A

Account Logon

42
Q

Which Security Audit trigger happens when a user accesses a directory service object with a System Access Control List (SACL)?

A

Directory Service Access