Chapter 9: Security Flashcards
In the Kerberos Policy Settings, what is the default value for Maximum Lifetime for User Ticket?
10 hours
Which of the following do attackers use if they want to find an organization’s dial-up ports?
war dialer
Which of the following allows designated recovery agents to create public keys that can decode encrypted information?
Encrypting File System
Which of the following is not a role that can be selected when you install Active Directory Certificate Services on a Windows Server 2008 computer?
intermediate
Which of the following contains a digest of the certificate data used for digital signing?
thumbprint
What is known as the cryptographic key that is used in exchanges between the security principal and the KDC?
long-term key
Which of the following types of connections is established between two computers involved in the tunneling process?
PPP
Which of the following specifies a value assigned by the CA that uniquely identifies the certificate?
serial number
Which of the following template versions provides backward compatibility for CAs running Windows Server 2003 Standard Edition and Windows 2000 family operating systems?
version 1
Smartcard User is a version __________ certificate template.
1
For encryption on a data network to be both possible and practical, what form of encryption do computers typically use?
public key
Which of the following is the default maximum password age?
42 days
An ACL is a collection of individual permissions presented in what form?
access control entries
Which of the following authentication devices verifies the identity of a user during logon?
smart card
Which of the following is not a required permission that must be granted to the same user or group for the autoenrollment certificate template permission to function correctly?
Allow Write
What type of list does SAM enable computers to maintain?
local users and groups that function as a decentralized authentication system
For authentication, PPTP supports all of the following authentication protocols except __________.
Microsoft Point-to-Point Encryption (MPPE)
Which of the following terms specifies the functions for which a digital certificate can be used?
enhanced key usage
In Windows Server 2008, a root CA’s self-generated certificate defaults to a validity period of __________.
5 years
Which of the following methods enables the server to support authentication with smart cards or other types of digital certificates?
Extensible Authentication Protocol-Transport Level Security (EAP-TLS)
Which of the following is not an important criterion that firewalls can use in their rules?
DNS name
Effective permissions for a given resource can be assigned in various ways. Which of the following is not a way in which they can be assigned?
application controlled
Which of the following is the most popular biometric technology in use today?
fingerprint matching
Which of the following is the strongest authentication protocol supported by Windows Server 2008?
Extensible Authentication Protocol (EAP)
