misc

Question 1

what is the difference between universal and global groups

Answer 1

universal groups can give user permissions to any resource in the forest while global groups can only give users user permissions to a resource in the same domain

universal groups can contain other universal groups, global groups and user objects while global groups can only contain other global groups and user objects

Question 2

what are the foundational principles of trusted cloud

Answer 2

privacy, security, compliance

Question 3

what are the requirements of trustworthy computing

Answer 3

hardware must be reliable
software must be reliable
service components must be dependable

Question 4

what are the goals of trustworthy computing

Answer 4

security, privacy, business integrity

Question 5

what are the means of delivery of trustworthy computing

Answer 5

security by design and by default
privacy
transparency
availability and manageability

Question 6

what are the commitments to security microsoft made and examples of each

Answer 6

isolation and resilience
quality
updates
access control and authentication

isolation and resilience: firewall, cpu isolation, object access control

quality: secure coding practices during deployment, thorough bug testing and automated testing tools

updates: consistent updates

access control and authentication: providing access control to objects and using passwords/pki

Question 7

what are the security by default in a domain domain controller

Answer 7

encryption
file policies
file permissions
server management and monitoring
logging/auditing

Question 8

file sharing requirements and protocol

Answer 8

protocol: smb

requirements: enable “file and print sharing (smb-in)” and port 445 must be open

Question 9

difference between efs and bitlocker

Answer 9

efs using symmetric while bitlocker uses asymmetric

efs encrypts on a file level while bitlocker encrypts the whole hard drive

Question 10

what is fine grained password policy ?

Answer 10

Fine-Grained Password Policies (FGPP) allow you to create multiple password policies for specific users or groups

Question 11

precautions to take when working with windows registry

Answer 11

do not copy from 1 windows machine to another

only change as a last resort

regularly backup

delegate a specific group of administrators that can edit registry