Chapter 16 Quiz

Question 1

Your computer has a single HDD formatted with NTFS with the following data folders:

C:\Documents
C:\Pictures

You create a new child folder under the C:\Documents folder.

What term describes the permissions the new folder automatically attains from the C:\Documents folder?

Answer 1

Inherited permissions

Question 2

Which of the following security settings can best help minimize brute force attacks on local user account passwords?

Answer 2

Account lockout threshold

Question 3

A Windows user called the help desk to request that her local user account password be reset on her computer. The help desk technician connected to the computer using RDC and reset the password using the Network Places Wizard. After the password was reset, the user lost access to all the data files on the local HDD.

Which of the following describes the most likely reason for the lost data files?

Answer 3

The user had previously encrypted her data files and folders using EFS.

Question 4

A Windows 10 user is copying a file from the C:\data folder to the E:\data folder. The C: drive is formatted with NTFS, and the D: drive is formatted with FAT32.

What happens to the permissions of the file on the D:\ drive when copied?

Answer 4

The file will lose all permissions.

Question 5

You need to secure your Windows 7 computer in a way that prevents access to the entire HDD even if the drive is moved to another system.

Which solution will you implement?

Answer 5

BitLocker

Question 6

Which of the following security policies can be implemented to prevent removable media from automatically launching potentially harmful programs?

Answer 6

Disable AutoRun.

Question 7

A technician is using the Security tab in the Properties dialog box in an attempt to remove the inherited status from a file’s permissions but cannot locate where to make the change.

Which of the following steps should the technician take to make this change?

Answer 7

Click the Advanced button to open Advanced Security Settings for the file.

Question 8

You are having difficulty changing permissions for a folder on an NTFS volume that was created by another user.

How can you best solve this issue without losing data in the folder?

Answer 8

Take ownership of the folder and then change permissions.

Question 9

A technician, who was signed in to a Windows 10 computer as local administrator, accessed the Local Security Policy console and changed the Lock Screen timeout from 10 minutes to 60 minutes. After the technician completed the change, the user signed in to AD and discovered that the setting had reverted to 10 minutes.

What can the technician do to keep the setting from reverting from 60 minutes to 10 minutes?

Answer 9

The Lock Screen timeout setting needs to be made in the AD OU GPO.

Question 10

Which of the following best meets the requirements of a strong password?

Answer 10

t*M&2.zY7

Question 11

You have been tasked with training end users in security best practices and have observed a trend among users in which many are writing down their passwords.

Which of the following procedures can be implemented to provide enough security to protect resources while minimizing the need for users to write down their passwords?

Answer 11

Lengthen the time period between forced password changes.

Question 12

A coworker asks your opinion about how to minimize ActiveX attacks while she browses the Internet using Internet Explorer. The coworker recalls there is a setting in the Internet Options dialog box to prompt the user before downloading ActiveX controls, but can’t remember which tab to use.

Which of the following tabs will you suggest to the coworker?

Answer 12

Security tab

Question 13

You have received several trouble tickets from the employees in the warehouse for the stand-alone computers used to control various shipping machines because the computers are not booting when powered. Each time a technician resolves the booting issue the boot order is changed in the firmware. Each computer is required to have the USB ports disabled in the firmware to keep employees from connecting rogue devices.

Which of the following steps should be taken to eliminate these trouble tickets?

Answer 13

Enable the supervisor password in the BIOS/UEFI setup.

Question 14

The users in the sales department need a central location on the network to share data files. All the client computers in the organization are running Windows 10 and have network and Internet connectivity. The file server that hosts the network drive for the sales department is running Windows Server 2016.

Which of the following is the first step in implementing this data share?

Answer 14

Share the folder or volume on the file server that will store the shared data files.

Question 15

Your organization recently deployed a Windows domain controller with Active Directory. All the domain OU users need to run the same script file each time they sign in to Windows.

How can the settings be configured with the least effort by the admin?

Answer 15

Configure Group Policy to run a logon script.

Question 16

A technician is configuring the Windows computers on a network to print to a printer that is directly connected to the network via UTP cable.

What term best describes this method of printer connectivity?

Answer 16

Network printer

Question 17

Several computers in your organization are being used from within the building after hours when the company is closed. Your manager has asked you to configure the computers to limit access to business hours.

Which of the following steps can be taken to limit access to the computers?

Answer 17

Configure logon time restrictions.

Question 18

Which of the following is a hardware component used to hold the BitLocker encryption key and ensures encrypted data is not accessed in the event a hard drive is lost or stolen?

Answer 18

TPM

Question 19

A technician wants to limit access to a group of folders and is using Group Policy to prevent the users in the sales department from accessing folders assigned to the accounting department. The technician is having difficulty achieving acceptable results.

Which of the following is the most likely reason the technician is having difficulties?

Answer 19

The technician should be setting NTFS permissions instead of using Group Policy.

Question 20

You recently created several new user accounts in the Sales OU and configured them with the appropriate group membership, logon scripts, and printer access. Except for one new sales employee, all employees are actively using the account. The remaining employee will be using the account within the next two weeks.

What is best practice for the remaining unused account?

Answer 20

Disable the account until the employee is ready to use it.

Question 21

While performing disk and file maintenance on the company file server, you determine a user in the accounting department has been accidentally saving documents to all shared folders on the file server. The user’s computer was recently passed to her from another user in the company, and according to company policy, the user should have access only to the accounting share.

Which of the following best describes this situation?

Answer 21

The principle of least privilege was not followed.

Question 22

A Windows 10 Home user is attempting to encrypt the contents of a folder on a volume formatted with NTFS. The user contacted you to ask why the option to encrypt the folder is disabled.

What is the most likely reason the encryption option is disabled?

Answer 22

Windows Home editions do not support EFS

Question 23

An administrator is assigning Windows user accounts to user groups based on the user’s role and notices the built-in Power Users group.

What is the purpose of the Power Users group in Windows 7 and later?

Answer 23

Backward compatibility for legacy operating systems and applications.

Question 24

A company asked you help mitigate the brute force attacks carried out against its users’ Windows account passwords.
You successfully removed the malware responsible for the attacks
You need to better secure the passwords assigned to the user accounts without limiting the system’s usability.
Which of the following should be included in securing the user accounts?
(Select THREE.)

a. Set failed logon restrictions.
b. Add each user to the Guests group.
c. Require user account passwords.
d. Disable password complexity requirements.
e. Change each account type to Administrator.
f. Require strong passwords.

Answer 24

a. Set failed logon restrictions.

c. Require user account passwords.

f. Require strong passwords.

Question 25

Users and resources of a company or school managed by AD are organized into a _____________ (the entire enterprise)

Answer 25

forest

Question 26

What statement about user accounts and groups is NOT true?

a. a user account can belong to only one group at a time
b. Everyone group includes the Authenticated Users
c. By default, standard users accounts belong to the Users group
d. Guest group has limited rights on the system

Answer 26

a. a user account can belong to only one group at a time.

Question 27

What is a valid reason for wanting to configure a proxy server via browser (Such as IE)?

a. to surf anonymously
b. to improve website performance
c. to connect to secured websites on a corporate network VPN
d. to increase the security of the connection

Answer 27

a. to connect to secured websites on a corporate network VPN

Question 28

Administrative shares are hidden by default.

True or False?

Answer 28

True

Question 29

User accounts that are issued a temporary user profile that is deleted when the user signs out are members of what group?

a. Backup Operators group
b. Power Users group
c. Guests group
d. Administrators group

Answer 29

c. Guests group

Question 30

A technician is configuring the Windows computers on a network to print to a printer that is directly connected to the network via UTP cable.
What term best describes this method of printer connectivity?

a. Administrative share
b. Shared printer
c. Network drive mapping
d. Network printer

Answer 30

d. Network printer

Question 31

You recently created several new user accounts in the Sales OU and configured them with the appropriate group membership, logon scripts, and printer access.
Except for one new sales employee, all employees are actively using the account.
The remaining employee will be using the account within the next two weeks.
What is best practice for the remaining unused account?

a. Leave the account active since it will be unused for only two weeks.
b. Delete the account and re-create it when the employee is ready to use it.
c. Disable the account until the employee is ready to use it.
d. Remove the account membership to all groups.

Answer 31

c. Disable the account until the employee is ready to use it.

Question 32

You have received several trouble tickets from the employees in the warehouse for the stand-alone computers used to control various shipping machines because the computers are not booting when powered.
Each time a technician resolves the booting issue the boot order is changed in the firmware.
Each computer is required to have the USB ports disabled in the firmware to keep employees from connecting rogue devices.
Which of the following steps should be taken to eliminate these trouble tickets?

a. Install a lock on the computer case to prevent removal of the covers.
b. Disconnect the USB ports from the motherboard.
c. Require all employees to use a unique Windows user account and password.
d. Enable the supervisor password in the BIOS/UEFI setup

Answer 32

d. Enable the supervisor password in the BIOS/UEFI setup.

Question 33

Active Directory _______________________ (AD DS) authenticates accounts and authorizes what these accounts can do. (two word answer)

Answer 33

Domain Services

Question 34

The principle of _________________________ is an approach to permissions in which a user is given only the permissions required to perform her job and no more. (two word answer)

Answer 34

least privilege

Question 35

A technician wants to limit access to a group of folders and is using Group Policy to prevent the users in the sales department from accessing folders assigned to the accounting department.
The technician is having difficulty achieving acceptable results.
Which of the following is the most likely reason the technician is having difficulties?

a. The technician should be using Local Security Policy instead of Group Policy.
b. The users in the sales department are in a different domain than the accounting department users.
c. The technician should be setting NTFS permissions instead of using Group Policy.
d. The technician is not signed in as a Domain Admin

Answer 35

c. The technician should be setting NTFS permissions instead of using Group Policy.