Deck 7: Securing Windows Server 2008 Servers

Question 1

A ____ system starts with a reduced attack surface; it is regularly audited to ensure that it remains secure and is kept up to date.

A) hardened
C) constrained
B) restricted
D) hindered

Answer 1

A

Question 2

The scwcmd command ____ is used to apply the security policy to the system.

A) enable
C) display
B) configure
D) register

Answer 2

B

Question 3

The scwcmd command ____ can be used to extend the SCW database by adding roles, tasks, services, and port definitions.

A) configure
C) transform
B) rebuild
D) register

Answer 3

D

Question 4

When hardening a system, start by making sure that only the needed services and protocols are installed and enabled.

Question 5

A perimeter network is provided by using two firewalls; this arrangement is often referred to as a(n) ____.

A) restricted zone
C) demilitarized zone
B) internal zone
D) buffer zone

Question 6

____ logs an event when a user account or group is added, deleted, or modified, or when a password is set or modified.

A) Audit account management
C) Audit file management
B) Audit object management
D) Audit user management

Question 7

____ can be used to track the actions of users and record the details of these actions in the Windows Security log.

A) Policy monitoring
C) Eventlog monitoring
B) Scanning
D) Auditing

Question 8

A scheduled ____ provides automation and streamlines an administrator's job.

A) script
C) baseline
B) interface
D) tool

Question 9

____ if enabled, logs events when a user exercises most user rights.

A) Audit logon
B) Audit object
C) Audit account
D) Audit privilege use

Question 10

The SCW GUI version can be used to perform compliance auditing on a system.

Question 11

You can perform the compliance audit with the following command: ____

A) scwcmd configure /p:PolicyPathName
B) scwcmd display /p:PolicyPathName
C) scwcmd analyze /p:PolicyPathandName
D) scwcmd baseline /p:PolicyPathName

Question 12

WSUS includes the ability to export and import updates to and from media.

Question 13

The value of any command-line tool is that it can be ____.

A) kept secure
C) scheduled
B) controlled
D) scripted

Question 14

____ checks include possible security issues such as whether the Guest account is enabled, the file system isn't NTFS, or whether there are excessive members of the Administrators group.

A) Windows administrative vulnerabilities
C) Common security vulnerabilities
B) Windows patches
D) Windows configuration vulnerabilities

Question 15

You can use Server Manager to create a security policy that can be applied to any system to reduce the attack surface.

Question 16

____ audits user logon events when a user is authenticated from a local computer (not a domain controller).

A) Audit account management
C) Audit object events
B) Audit logon events
D) Audit privilege use

Question 17

When MBSA is installed, the ____ command-line utility is also installed, which can be used to run MBSA from the command line.

A) MBSAGUI
C) MBSA /CLI
B) MBSACLI
D) MBSA MMC

Question 18

In general, ____ record who performed an action, what action was performed, and when and where it was performed.

A) security log entries
C) system log entries
B) auditing log entries
D) application log entries

Question 19

Regularly checking systems to ensure that they haven't been changed is called ____.

A) compliance certification
C) compliance auditing
B) compliance baselining
D) compliance hardening

Question 20

The scwcmd command transform is used to roll back the settings of the last applied SCW security policy.

Question 21

____ logs tracking information events such as program activation and process exits.

A) Audit account management
B) Audit log purging
C) Audit process tracking
D) Audit token tracking

Question 22

____ provides updates for all supported versions of Windows operating systems.

A) Windows Update
B) Microsoft Update
C) Windows Control
D) Software Update

Question 23

Discuss using WSUS with branch offices.

Question 24

____________________ identify resources in one network that can communicate with resources in another network.

Question 25

Within a domain environment, ____ can be used as a central location to download and approve updates.

A) BITS
B) Microsoft Server Update Services
C) Windows Update Services
D) Windows Server Update Services

Question 26

In the context of server security, a(n) ____________________ is a starting point for a server that locks it down as much as possible while also allowing it to operate.

Question 27

Name and describe a primary tool used for compliance auditing.

Question 28

List and explain the three parts to the Microsoft SD³+C approach.

Question 29

When two WSUS servers are working as upstream/downstream servers in ____ mode, the upstream server sends all the updates it receives to the downstream server.

A) autonomous
B) synchronous
C) automatic
D) controlled

Question 30

List and describe a primary benefit provided by WSUS.

Question 31

Explain the difference between an upstream server and a downstream server.

Question 32

____ are a group of updates used to target a specific area such as security, or a specific component or application.

A) Service packs
B) Drivers
C) Update rollups
D) Updates

Question 33

____ are software components designed to support hardware.

A) Interfaces
B) Drivers
C) Applications
D) Update rollups

Question 34

____________________ rules are commonly used to publish an Internet-facing server's connection information to the external firewall.

Question 35

List and describe two areas that should be considered when hardening a system's security.

Question 36

Explain how to install WSUS.

Question 37

The scwcmd command ____________________ is used to analyze a system against a policy and determine if the system is compliant with the policy.

Question 38

List and explain one concern when considering adding WSUS to a network.

Question 39

When you run SCW, it creates a configuration ____________________ of all the possible server roles, client features, options, services, and Windows firewall settings.

Question 40

Discuss options for creating a perimeter network.

Question 41

Describe the purpose of the WSUS statistics server.