CHAPTER 3.1

Question 1

The user account is

Answer 1

An entity which is created to identify a user to the system.
* Each account is assigned a unique Security Identifier (SID)
* Is used to control access and privilege to resources and systems

Question 2

Local User Account

Answer 2

Created on each computer
* Reside in the Security Account
Manager (SAM)
* Provide access to resources on the
local computer

Question 3

Domain User Account

Answer 3

• Stored in the Active Directory
  Database on the domain controller
• Provide access to resources on the
  domain

Question 4

Administrator

Answer 4

On a member server or standalone server:
– has full control of all files and management for the local computer.
* On a domain controller:
– created in Active Directory and has full control of the domain.
* The Administrator account cannot be deleted, but can be renamed.

Question 5

Guest

Answer 5

For user with no account.
* Has no password
* Disabled by default.

Question 6

Administrator Account Security Guidelines

Answer 6

Rename the Administrator account
* Set a strong password
* Limit knowledge of administrator passwords to only a few
people
* Do not use the Administrator account for daily non administrative tasks

Question 7

Computers account

Answer 7

• have SAM Account Name and
  password

Question 8

Scenarios where a secure channel
can be broken

Answer 8

Computer and domain disagree
about what the password is.

Question 9

Distribution Groups

Answer 9

Used only with e-mail applications
* Not security-enabled

Question 10

Security Groups

Answer 10

Used to assign rights and permissions
* Security-enabled (with SID)
* Can be used with e-mail application

Question 11

Special identities

Answer 11

Are groups for which membership is controlled by the operating
system