Exam 10: Securing Windows Server 2008

When a user encrypts a file, a symmetric file encryption key (FEK)is generated that EFS uses to encrypt the file.

List three authentication protocols supported by Windows Server 2008.

The term ____ refers to a form of authentication that uses a string of characters that is provided to all IPSec peers participating in the communications.

____ involves the capture of network traffic by attackers looking for important data files and to obtain passwords in order to penetrate a network.

Windows Server 2008 has two tools for managing EFS: file and folder properties and _________________________.

EFS uses a combination of private and public key encryption for securing a user's data.

____ provides hard drive-based encryption of servers and Windows Vista computers.

All forms of NTLM use the ____.

With ____, each user has a public key that is available to everyone and a private key that is known only to the user.

For each transaction, IPSec uses the ____ to negotiate security protocols each IPSec peer will use for communicating and constructing data transactions.

A ____ is a microchip that performs basic security tasks with encryption keys.

____ attacks are performed by flooding a host or a network router with more traffic than it can handle.

A(n)____ attack involves placing a computer between two communicating computers in a network connection. This computer impersonates each machine in the transaction, giving the computer the ability to read or modify communications between the two computers.

Using BitLocker with a TPM and a PIN or a USB flash drive is called ____.

IPSec's ____ provides end-to-end security between devices or hosts, such as between a client and server or for Layer 2 Tunneling Protocol (L2TP)virtual private network (VPN)solutions for remote access.

The Monitoring section of the WFAS console provides you with real-time information about active connections passing through the Windows Firewall.

____ involves users who deny that they performed a malicious action on a network, and administrators do not have a way to prove them wrong.

Along with providing file security through Access Control Lists, ____ allows users to perform file-based encryption through the Encrypting File Service (EFS).

A(n)____ is an instruction to open a port briefly, allow a program or service to pass information, and then close the port.

Briefly discuss the three scenarios available when deploying IPSec: site to site, client to client, and client to site.