Managing User Account & Password Security

Question 1

When a user leaves the organization, what’s the best thing to do with their account?

Answer 1

Disable it until you know what should happen to it as you may want to re-use it again for another employee

Question 2

What should be set on a temporary employee’s account as part of good management?

Answer 2

Set the account to expire on their last expected day of work

Question 3

Admin, Analyst, Root and Wizard are example of what not to use for which type of username?

Answer 3

The Maintenance/Admin Account

Question 4

What’s the recommended length of a good password?

Answer 4

Between 8 and 15 characters long

Question 5

Name 5 password management methods

Answer 5

1) Automatic Account Lockouts
2) Password Expiration
3) Password History exclusion
4) Min password length
5) Complex multi-character passwords

Question 6

Why is it recommended that a network admin should unlock any locked out accounts instead of the operating system doing it automatically?

Answer 6

So they can be sure to know about any possible security breaches.

Question 7

It’s ok to use the default password expiry length on your network operating syste. TRUE or FALSE?

Answer 7

FALSE - these defaults are usually known by hackers so change it in accordance with your security policy.

Question 8

What does single sign on use to allow users to access multiple resources with the same password?

Answer 8

an access token

Question 9

Where is the local user database located and what is ti called?

Answer 9

In windows\system32\config. it is called the Security Accounts Manager

Question 10

What 3 additional attributes other than the DN (Distinguished Name) and RDN ( Relative DN) does LDAP use to identify an entry in its database?

Answer 10

1) Common Name (CN)
2) Domain Component (DC)
3) Organizational Unit (OU)

Question 11

What standard provides an entity with the credentials to prove its identity and associates that identity with a public key?

Answer 11

An X.509 certificate (it’s the standard that defines security certificates)

Question 12

List the 3 Verisign digital certificate classes

Answer 12

1) for individuals and email. These get saved by browsers
2) For organizations
3) For servers and software signing in which independent checking is done by the Certificate Authority

Question 13

List the 5 ways in which a user could identify themselves

Answer 13

Kill All People And Dogs

1) something they KNOW
2) something they ARE
3) something they POSSESS
4) somewhere they ARE
5) something they DO