Question 1

____ provides updates for all supported versions of Windows operating systems.

Accepted Answer

A)  Windows Update 
B)  Microsoft Update 
C)  Windows Control 
D)  Software Update 
A)  Windows Update 
B)  Microsoft Update 
C)  Windows Control 
D)  Software Update

Question 2

Match between columns
                        Premises: Additional product functionality that wasn’t included in the original release
Connections from the Internet from customers, remote employees, or trusted business partners
A dedicated application that can be installed on a server to perform as a firewall
Collections of updates and fixes that often include additional features
Connections on the internal network from company-owned resources and employees
Identify traffic and protocols that are allowed to and from the perimeter network
Connections from the Internet
The process of making a system more secure from the default configuration
Added as a buffer between an internal protected network and an external unprotected network

Accepted Answer

The Answer of trusted and feature packs and hardening and is...

Question 3

Discuss options for creating a perimeter network.

Accepted Answer

A perimeter network is commonly created

Question 4

When hardening a system, start by making sure that only the needed services and protocols are installed and enabled.

Accepted Answer

A) True 
 B)False

Question 5

When MBSA is installed, the ____ command-line utility is also installed, which can be used to run MBSA from the command line.

Accepted Answer

A)  MBSAGUI 
B)  MBSACLI 
C)  MBSA /CLI 
D)  MBSA MMC 
A)  MBSAGUI 
B)  MBSACLI 
C)  MBSA /CLI 
D)  MBSA MMC

Question 6

Regularly checking systems to ensure that they haven't been changed is called ____.

Accepted Answer

A)  compliance certification 
B)  compliance baselining 
C)  compliance auditing 
D)  compliance hardening 
A)  compliance certification 
B)  compliance baselining 
C)  compliance auditing 
D)  compliance hardening

Question 7

The scwcmd command ____ is used to apply the security policy to the system.

Accepted Answer

A)  enable 
B)  configure 
C)  display 
D)  register 
A)  enable 
B)  configure 
C)  display 
D)  register

Question 8

The value of any command-line tool is that it can be ____.

Accepted Answer

A)  kept secure 
B)  controlled 
C)  scheduled 
D)  scripted 
A)  kept secure 
B)  controlled 
C)  scheduled 
D)  scripted

Question 9

List and explain one concern when considering adding WSUS to a network.

Accepted Answer

Hardware. You'll need at least a 1 GHz C

Question 10

____ checks include possible security issues such as whether the Guest account is enabled, the file system isn't NTFS, or whether there are excessive members of the Administrators group.

Accepted Answer

A)  Windows administrative vulnerabilities 
B)  Windows patches 
C)  Common security vulnerabilities 
D)  Windows configuration vulnerabilities 
A)  Windows administrative vulnerabilities 
B)  Windows patches 
C)  Common security vulnerabilities 
D)  Windows configuration vulnerabilities

Question 11

Within a domain environment, ____ can be used as a central location to download and approve updates.

Accepted Answer

A)  BITS 
B)  Microsoft Server Update Services 
C)  Windows Update Services 
D)  Windows Server Update Services 
A)  BITS 
B)  Microsoft Server Update Services 
C)  Windows Update Services 
D)  Windows Server Update Services

Question 12

____ are software components designed to support hardware.

Accepted Answer

A)  Interfaces 
B)  Drivers 
C)  Applications 
D)  Update rollups 
A)  Interfaces 
B)  Drivers 
C)  Applications 
D)  Update rollups

Question 13

____________________ identify resources in one network that can communicate with resources in another network.

Accepted Answer

The answer of ____________________ identify resources in one network that...

Question 14

List and explain the three parts to the Microsoft SD³+C approach.

Accepted Answer

Secure by Design. Security consideration

Question 15

____ are a group of updates used to target a specific area such as security, or a specific component or application.

Accepted Answer

A)  Service packs 
B)  Drivers 
C)  Update rollups 
D)  Updates 
A)  Service packs 
B)  Drivers 
C)  Update rollups 
D)  Updates

Question 16

____ logs an event when a user account or group is added, deleted, or modified, or when a password is set or modified.

Accepted Answer

A)  Audit account management 
B)  Audit object management 
C)  Audit file management 
D)  Audit user management 
A)  Audit account management 
B)  Audit object management 
C)  Audit file management 
D)  Audit user management

Question 17

WSUS includes the ability to export and import updates to and from media.

Accepted Answer

A) True 
 B)False

Question 18

List and describe a primary benefit provided by WSUS.

Accepted Answer

Reduced Internet bandwidth. Internet ban

Question 19

____ audits user logon events when a user is authenticated from a local computer (not a domain controller).

Accepted Answer

A)  Audit account management 
B)  Audit logon events 
C)  Audit object events 
D)  Audit privilege use 
A)  Audit account management 
B)  Audit logon events 
C)  Audit object events 
D)  Audit privilege use

Question 20

The scwcmd command ____ can be used to extend the SCW database by adding roles, tasks, services, and port definitions.

Accepted Answer

A)  configure 
B)  rebuild 
C)  transform 
D)  register 
A)  configure 
B)  rebuild 
C)  transform 
D)  register

____ provides updates for all supported versions of Windows operating systems.

Discuss options for creating a perimeter network.

When hardening a system, start by making sure that only the needed services and protocols are installed and enabled.

When MBSA is installed, the ____ command-line utility is also installed, which can be used to run MBSA from the command line.

Regularly checking systems to ensure that they haven't been changed is called ____.

The scwcmd command ____ is used to apply the security policy to the system.

The value of any command-line tool is that it can be ____.

List and explain one concern when considering adding WSUS to a network.

____ checks include possible security issues such as whether the Guest account is enabled, the file system isn't NTFS, or whether there are excessive members of the Administrators group.

Within a domain environment, ____ can be used as a central location to download and approve updates.

____ are software components designed to support hardware.

____________________ identify resources in one network that can communicate with resources in another network.

List and explain the three parts to the Microsoft SD³+C approach.

____ are a group of updates used to target a specific area such as security, or a specific component or application.

____ logs an event when a user account or group is added, deleted, or modified, or when a password is set or modified.

WSUS includes the ability to export and import updates to and from media.

List and describe a primary benefit provided by WSUS.

____ audits user logon events when a user is authenticated from a local computer (not a domain controller).

The scwcmd command ____ can be used to extend the SCW database by adding roles, tasks, services, and port definitions.

Designing Active Directory Domain Services

Designing Physical Topology

Designing and Implementing DNS

Designing and Implementing Group Policy

Designing Remote Access and Terminal Services Strategies

Designing and Implementing a PKI

Designing High Availability and Business Continuity

Designing Supporting Services

Designing Virtualization Strategies

Filters

Exam 7: Securing Windows Server 2008 Servers

____ provides updates for all supported versions of Windows operating systems.

Discuss options for creating a perimeter network.

When hardening a system, start by making sure that only the needed services and protocols are installed and enabled.

When MBSA is installed, the ____ command-line utility is also installed, which can be used to run MBSA from the command line.

Regularly checking systems to ensure that they haven't been changed is called ____.

The scwcmd command ____ is used to apply the security policy to the system.

The value of any command-line tool is that it can be ____.

List and explain one concern when considering adding WSUS to a network.

____ checks include possible security issues such as whether the Guest account is enabled, the file system isn't NTFS, or whether there are excessive members of the Administrators group.

Within a domain environment, ____ can be used as a central location to download and approve updates.

____ are software components designed to support hardware.

____________________ identify resources in one network that can communicate with resources in another network.

List and explain the three parts to the Microsoft SD³+C approach.

____ are a group of updates used to target a specific area such as security, or a specific component or application.

____ logs an event when a user account or group is added, deleted, or modified, or when a password is set or modified.

WSUS includes the ability to export and import updates to and from media.

List and describe a primary benefit provided by WSUS.

____ audits user logon events when a user is authenticated from a local computer (not a domain controller).

The scwcmd command ____ can be used to extend the SCW database by adding roles, tasks, services, and port definitions.

Designing Active Directory Domain Services

Designing Physical Topology

Designing and Implementing DNS

Designing and Implementing Group Policy

Designing Remote Access and Terminal Services Strategies

Designing and Implementing a PKI

Designing High Availability and Business Continuity

Designing Supporting Services

Designing Virtualization Strategies

Filters