C10 - Managing Security

Question 1

Bitlocker encrypts the entire Windows volume. T/F

Answer 1

True

Question 2

NAP stands for Network Access Policy. T/F

Answer 2

False, Network Access Protection

Question 3

Windows Firewall with Advanced Security allows rules based on port numbers. T/F

Answer 3

True

Question 4

Encrypting File Services (EFS) provides hard drive encryption. T/F

Answer 4

False, provides folder level

Question 5

Windows Firewall Exceptions lists the port numbers. T/F

Answer 5

False, lists the function only

Question 6

Security Configuration Wizard allows you to _______ a server.

Answer 6

harden (or lock-down)

Question 7

Windows Firewall Exceptions are for inbound or outbound traffic?

Answer 7

inbound

Question 8

Which is not a Windows Firewall Profile? Public / private / domain / workgroup

Answer 8

workgroup

Question 9

If you want to close an outbound port, then you need to use the ________ feature of Windows Firewall.

Answer 9

advanced

Question 10

Encrypting File Services (EFS) uses _______ keys for encryption and decryption.

Answer 10

symmetric

Question 11

You can do EFS via the command line with the ________ command.

Answer 11

cipher

Question 12

EFS only encrypts _______ and __________.

Answer 12

folders / files

Question 13

The difference between EFS and Bitlocker, is Bitlocker encrypts the ___________.

Answer 13

entire volume

Question 14

To access the security risks on a server, run Microsoft’s

Answer 14

Baseline Security Analyzer

Question 15

IPSec operates at what level of the OSI model?

Answer 15

3 - Network

Question 16

If IPSec ran at layer 2 of the OSI model, then the router would need to _________ every packet.

Answer 16

inspect

Question 17

If using IPSec between two networks, you should run _________ mode.

Answer 17

tunnel

Question 18

If using IPSec between two hosts, you should run ___________ mode.

Answer 18

transport

Question 19

If you want IPSec to secure and encrypt the packet, then you would run what security method?

Answer 19

Encapsulating Security Payload

Question 20

If you want IPSec to secure and NOT encrypt the packet, then you would run what security method?

Answer 20

Authentication Header

Question 21

Network Access Protection is not supported on an Windows OS before __________.

Answer 21

XP SP3

Question 22

If using NAP and a client doesn’t meet the health standards, then NAP will ___________.

Answer 22

Prevent the client from connecting