Communications and Security in Windows Server 2008

Question 1

Steps for securing authentication are

Answer 1

1. Design an authentication strategy
2. Create Accounts
3. Secure the authentication process
4. Educate users

Question 2

Guidelines for OU organization and structure design

Answer 2

Identify and create admin groups ot which rights need to be delegated

Idnetify users or groups to which rights need to be delegated in the OU and place them in the adminstrative group

Create objects that need to be controlled and place them in the OU

In the administrative group, delegate administrative tasks to the OU

to hide OU objects set it for list content permission for the users you want to see and remove this permission from others

Question 3

To create an OU to hide objects

Answer 3

modify the ACL of the OU - the list of permissions that are attached to an object

Question 4

Command Line Utility for setting an SPN

Answer 4

setspn

Question 5

2 local server 2008 accounts

Answer 5

Administrator

Guest

Question 6

DC default accounts

Answer 6

Administrator
Guest Account
HelpAssistant Account

Question 7

PA

Answer 7

Protected Administrator Account - in admin group with the lowest rights available to an admin

Question 8

PasswordReplicationAllowed for a RODC means

Answer 8

The credentials for the specified groups are replicated to the RODC from the writable DC configured as its replication source

Question 9

IPSec

Answer 9

2008 Internet protocol security (IPSec)enforces secure communication between systems on an IP network. provides a stronger access security model than the firewall mechanism without require complex configurations

use ipsec snap in to create, edit and assign policies local and network

Rules it uses:

Filter list
Filter action
Authentication method
Tunnel endpoint
Connection type

delete policy before deleting the attached GPO or it will continue to run

computers, OUs, Domains and sites

includes policy’s name and description
cryptographic key exchange settings

Question 10

IPSEc policy ports

Answer 10

allow requests are
POrt 80 - default http
Port 20 - default for FTP file Transfer Protocol

Question 11

3 steps to creating a policy

Answer 11

1. Creating filter lists
2. Setting Filter Actions
3. Creating a policy and adding rules to it

go to security node in gpme
choose IP Security Policies on Active Directory

Question 12

ReplicaDomainDNSName =

Answer 12

Have to have [DCINSTALL] at top of answer file for installing an RODC

DNS name of Domain where RODC will be

Question 13

DCAccountName

RODC

Answer 13

name of the RODC Account

Question 14

PasswordReplicationDenied

RODC

Answer 14

specifies the credentials of the securty principals that cannot be replicated to the RODC from the writable DC

By default this is applied only to the Denied RODC Password Replication security group

Question 15

PasswordReplicationAllowed=brodacdero.com"Allowed RODC Password Replication Group”

RODC

Answer 15

All the security principals to the Password Replication policy need to have this line done ie: guestuser, admin, mark, etc

Question 16

DelegateAdmin
SiteName=Default-File-Site-Name
IsntallDNS=yes
ConfirmGc=Yes  
ReplicationSourceDC

Answer 16

(gc=GlobalCatalog)

Question 17

To create a RODC

Answer 17

log onto the DC, cmd prompt,
dcpromo /CreateDCAccount

dcpromo /CreateDCAccount(Username.domain)

/unattend “path to answerfile”

Log onto server and run dcpromo /useexistingAccount:Attach /unattend:”pathOfFile”

Question 18

ReplicationSourceDC

Answer 18

parameter specifies the FQDN of the DC that must replicate domain info to the RODC

Question 19

parameter that specifies the location of the directory database for the answer file for an RODC account

Answer 19

DatabasePath

Question 20

To create a filter list what steps must be done

Answer 20

Access options to manage IP filter lists and actions and use a wizard to add a filter list

Question 21

need to create filter action for IPSEC steps are

Answer 21

Access options to manage filter lists, launch a wizard to add a filter action and configure the action settings

Question 22

IP filter list and filter action have been created what is next

Answer 22

Create the IPSec policy, add the policy rules and assign the policy