Chapter 3 Flashcards

1
Q

What does UAC stand for?

A

User Account Control

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How do you disable UAC for a specific user account?

A

You cannot.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the differance between a Workgroup and a Domain.

A

Workgroups are decentralized, Domains are centralized.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the Computer Management Console?

A

One of the primary tools used to manage windows 7 that includes the most commonly used MMC snap-ins.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the built in accounts in windows that services start under?

A

Local System, NT authority/LocalService, NT authority/Network service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What level of access does the Local System account have (related to services)?

A

Highly privledged account that can access most resources on local computer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What level of access does NT Authority/Local Service have?

A

The same as a user account, when accessing network services it has no credentials and a null session

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What level of access does NT authority/NetworkService have?

A

The same level of access as the Users Group on the local computer, and it accesses network resources under the context of a Local Computer Account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What does the Server Service do?

A

Supports file, print, and named-pipe sharing over the network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What does the Workstation service do?

A

Creates and maintains client network connections to remote servers using the SMB protocol (allows you to share folders via samba)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Authentication?

A

The process of indentifying an individual (E.G. via a password)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Authorization?

A

The process of giving individuals access to system objets based on their indentity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Auditing

A

The process of keeping track of a users activity while accessing the network resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does a user account allow the system to do?

A

It allows the system to determine what a user can access and how they can access it (Authorization) and to audit a user by recording what was done on each individual user account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the three ways to authenticate a user?

A

Based off What they know (password) What they own/possess (ID card) What they are (biometrics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the two types of user accounts.

A

Local and Domain.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is an object?

A

An object is a distinct named set of attributes or characteristics that represent a network resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the security table created on the local user account called?

A

SAM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

SAM

A

Security Accounts Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a GUID?

A

It is called a globally unique identifier sometimes referred to as security identifier. It is to uniquely identify an object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Where can you create and edit a user account?

A

User accounts in the control panel AND The Local Users and Groups MMC snap-in

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are windows computer accounts for?

A

It provides a mean for authenticating and auditing the computers access to a windows network and its access to domain resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is a user profile?

A

A collection of folders and data that store the users current desktop environment and application settings.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is a group?

A

A group is a collection or list of user accounts or computer accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

what are the Roles of a Domain admin?

A

Can perform administrative tasks on any computer within the domain. By default, the Admin account is a member.

26
Q

What is a user profile?

A

A collection of folders and data that store the users current desktop environment and application settings, and records all network connections.

27
Q

What can Account operators do?

A

They can create, delete, and modify user accounts and groups.

28
Q

What can Backup operators do?

A

They can backup and restore all files using Windows Backup

29
Q

What does Credential Manger do?

A

It allows you to store credentials I.E. Usernames and passwords that you use to logon to websites or other computers on a network. This allows windows to automatically log you into websites/computers. Credentials are saved in special folders called vaults.

30
Q

What does the Authenticated users group include?

A

It includes all users with a valid user account on the computer or in Active Directory.

31
Q

What is the built in group Everyone

A

All users who access the computer even if the user does not have a valid account.

32
Q

What does a Directory Service do?

A

It stores, organizes, and provides access to information in a directory. It’s used for locating, managing, administering, and organizing common items and network resources such as volumes, folders, files, printers, users, groups, devices, telephone numbers, and other objects. AD is an example of a Directory Service.

33
Q

What is the definition of Group Policy?

A

It is one of the most powerful features of Active Directory that controls the working environment for user accounts and computer accounts. It provides the centralized management and configuration of operating systems and applications.

34
Q

Active Directory provides what network services?

A

LDAP Kerberos-based and SSO authentication DNS-based naming and other network information Central location for network administration and delegation of authority.

35
Q

What is LDAP?

A

Lightweight Directory Access Protocol

36
Q

SSO

A

Single sign-on authentication

37
Q

What does the GPO system settings control?

A

Application settings, desktop appearance, and behavior of system services.

38
Q

What does the GPO security settings control?

A

Local computer, domain, and network security settings

39
Q

What does The GPO software installation settings control?

A

Management of software installation, updates and removal.

40
Q

What is LDAP?

A

It’s an application profile used for querying and modifying data using directory services over TCP/IP. It users TCP port 389

41
Q

What does the GPO scripts settings control?

A

Scripts for when a computer starts or shuts down and when a user logs on and off.

42
Q

What is SSO?

A

It allows you to login once, but access multiple related but independant software systems without having to login again. With AD, you are assigneda token which can be used to login to other systems automatically.

43
Q

What does the GPO folder redirection settings control?

A

Storage for users folders on the network.

44
Q

What does GPO stand for?

A

Group policy Objects are collections of user and computer settings.

45
Q

What is Kerberos?

A

It’s a computer network authentication protocol which allows hosts to prove their indentity over a non-secure network in a secure manner. It can also provide mutual authentication so that both the user and server verify each other’s indentity.

46
Q

What does Active Directory do?

A

It allows you to organize all your network resources E.G. users, groups, printers, computers, and other objects so you can assign passwords, permissions, rights, and so on to the intendity that needs it. You can also assign who can manage a group of objects.

47
Q

What is a domain?

A

A logical unit of computers and network resources that defines a security boundry, that uses a single AD database to share its common security and user account information.

48
Q

What is the Account lockout duration?

A

It ranges from 1 to 99,999

49
Q

What is a tree?

A

Domains linked in a transistive trust Heirarchy

50
Q

what is the Account lockout threshold?

A

How many failed log-ons it will take until the account becomes locked. Ranges from 1 to 999

51
Q

What is a forest?

A

A collection of Domain Trees

52
Q

What is a Domain Controller?

A

A promoted windows server that stores a replica of the account and security information of a domain and defines the domain boundries.

53
Q

What is the Reset account lock out counter after?

A

How long does it take after a failed logon attempt before the counter tracking failed logons is reset to zero. Range is 1 to 99,999

54
Q

What MMC snap-ins are added to a domain controller?

A

AD Users and Computers AD Domains and Trusts AD Sites and Services AD Administrative center GPMC

55
Q

UPN

A

User Principal Name

56
Q

AD DS

A

Active directory Domain Services

57
Q

What is the definition of Minimum password length?

A

Determines the minimum number of characters that a users password must contain you can set a value between 1 to 14.

58
Q

GPMC

A

Group Policy Management Console

59
Q

What is a server that is not running as a domain controller?

A

A member Server

60
Q

What happens when a user logs on?

A

AD clients locate an AD server (Using DNS SRV resource records) known as a domain controller in the same site as the computer.