Module 14 - User Account Management - Q&A

Question 1

Which of the following methods are used to manage user credentials? (Choose two.)
A. Standalone
B. Centralized
C. Decentralized
D. Active Directory

Answer 1

B, C. Centralized and decentralized methods are used to manage user credentials in an organization.

Question 2

Which of the following is used in a Windows Active Directory network to push policies down to individual users and computers?
A. Account policy
B. Group policy
C. Rights, permissions, and privileges
D. Password policy

Answer 2

B. Group policy is the method used to push security policy elements to individual computers and users in a Microsoft Windows Active Directory structure.

Question 3

Which of the following terms describes the number of possible combinations in a password?
A. Character space
B. Character set
C. Complexity
D. Length

Answer 3

A. Character space describes the number of possible combinations in a password.

Question 4

Which of the following is used to prevent the reuse of passwords?
A. Disabling accounts
B. Account lockout
C. Password complexity
D. Password history

Answer 4

D. The password history setting in the account policy is used to prevent the reuse of older passwords.

Question 5

Which of the following factors determines how often passwords should expire and be reset?
A. Password history
B. The minimum amount of time the user is required to use the same password
C. The time and effort it may take for a hacker to crack the password
D. Account lockout duration

Answer 5

C. The time it might take a hacker to crack a password, based on complexity and other considerations, is usually the primary factor that drives how long the password can be valid before it expires and must be changed.

Question 6

Which of the following should be done to a user’s account when the user is under investigation for an indefinite period of time?
A. The account should be deleted.
B. The account should be locked.
C. The password for the account should be changed.
D. The account should be disabled.

Answer 6

D. If a user is under investigation, this may mean only a temporary suspension of his access to systems and data. Under this circumstance, the account should be disabled until management deems otherwise.

Question 7

Which of the following is the primary way to defeat brute-force attacks on passwords?
A. Account deletion
B. Account lockout
C. Password changes
D. Password history

Answer 7

B. Account lockout is best way to prevent brute-forcing a user account and password, since a malicious user can attempt to log in only a few times before the account is locked.

Question 8

Several users in the accounting department each require the same levels of access to the accounting server and its share data. Which of the following is the most efficient way to grant access to these users?
A. Create a logical group, assign the group the appropriate permissions to the resources, and then add the individual accounting user accounts to the group.
B. Assign each accounting user the appropriate permissions to the resources.
C. Create a logical group, assign the group the appropriate permissions to the resources, assign the appropriate permissions also to each individual user account, and then add the individual accounting user accounts to the group.
D. Create a logical group, then assign the appropriate permissions to each individual user, and then add those user accounts to the group.

Answer 8

A. The most efficient way is to create a logical accounting group, assign that group the appropriate permissions to the accounting server resources, and then add the individual accounting user accounts to the group.

Question 9

Which of the following are the best ways to ensure that user accounts are being used appropriately and securely? (Choose two.)
A. Periodically review assigned privileges.
B. Allow users to maintain their privileges indefinitely, even during promotion or transfer.
C. Continuously monitor accounts, through auditing, to ensure accountability and security.
D. Ensure that users permissions stay cumulative, regardless of which group or job role they occupy.

Answer 9

A, C. Periodic reviews and continuous monitoring are two ways to ensure that accounts and privileges are used in accordance with organizational policy and in a secure manner.

Question 10

Which of the following should usually be avoided and, if used, carefully documented and controlled?
A. System accounts
B. Multiple accounts
C. Shared accounts
D. Individual accounts Answers

Answer 10

C. Shared or group accounts should be avoided, and, if used, they should be thoroughly documented and carefully controlled.