Exam 7: Securing Windows Server 2008 Servers

A scheduled ____ provides automation and streamlines an administrator's job.

When you run SCW, it creates a configuration ____________________ of all the possible server roles, client features, options, services, and Windows firewall settings.

____ if enabled, logs events when a user exercises most user rights.

Name and describe a primary tool used for compliance auditing.

Explain how to install WSUS.

You can use Server Manager to create a security policy that can be applied to any system to reduce the attack surface.

____ logs tracking information events such as program activation and process exits.

Explain the difference between an upstream server and a downstream server.

In general, ____ record who performed an action, what action was performed, and when and where it was performed.

A perimeter network is provided by using two firewalls; this arrangement is often referred to as a(n) ____.

The SCW GUI version can be used to perform compliance auditing on a system.

A ____ system starts with a reduced attack surface; it is regularly audited to ensure that it remains secure and is kept up to date.

Discuss using WSUS with branch offices.

When two WSUS servers are working as upstream/downstream servers in ____ mode, the upstream server sends all the updates it receives to the downstream server.

In the context of server security, a(n) ____________________ is a starting point for a server that locks it down as much as possible while also allowing it to operate.

____ can be used to track the actions of users and record the details of these actions in the Windows Security log.

Describe the purpose of the WSUS statistics server.

The scwcmd command ____________________ is used to analyze a system against a policy and determine if the system is compliant with the policy.

You can perform the compliance audit with the following command: ____

____________________ rules are commonly used to publish an Internet-facing server's connection information to the external firewall.