Deck 4: Account-Based Security

Question 1

Accounts in NetWare 6.x can be created using the ConsoleOne tool.

Answer 1

True

Question 2

In Red Hat Linux, user accounts and groups can be created by editing the password, shadow, and group files.

Answer 2

True

Question 3

Information about groups is stored in the /etc/ shadow file, which typically contains an entry for each group, consisting of the name of the group, an encrypted group password, the GID, and a list of group members.

Answer 3

False

Question 4

To configure the security settings for an account, open the Red Hat Security Manager and select the account you want to configure.

Question 5

If Active Directory is installed and you are working on a DC, Windows 2000 Server and Windows Server 2003 will not allow you to use the Local Users and Groups tool.

Question 6

Under most circumstances, it is best for the network administrator to create and control all user passwords.

Question 7

An effective defense against attackers is the use of long passwords.

Question 8

In many UNIX systems, including Red Hat Linux, any account that has a UID of 1 automatically has access to anything in the system.

Question 9

The first step in developing an account policy in a company is usually to establish conventions for account names .

Question 10

Red Hat Linux is capable of monitoring unsuccessful logon attempts, in case an attacker attempts to break into an account by trying various password combinations or employing a brute force attack.

Question 11

A formal account policy may include decisions about the format of usernames and restrictions on how passwords are constructed.

Question 12

The advantage of having accounts based on the position or function is that, for the sake of security, it is easier to know who is logged on to a server.

Question 13

A password expiration period requires users to change passwords at regular intervals.

Question 14

Windows 2000/XP Professional is designed to effectively support up to 25 simultaneous users over a LAN.

Question 15

The Windows 2003 Common .adm administrative template is the default for managing Windows 2000 Professional and Windows XP Professional clients.

Question 16

The useradd - m command enables you to create a new user and establishes the home directory, if it has not previously been set up.

Question 17

The Mac OS X Server Admin tool allows you to create and manage accounts and groups.

Question 18

Windows 2000 Professional is typically installed with an Administrator account and a Guest account.

Question 19

Windows 2003 access rights give the server administrator important security controls over who can access server and Active Directory resources.

Question 20

A Netware 6.x user template , is an object stored in NDS that contains properties associated with designated accounts.

Question 21

Where are group policy settings stored?

A) In the registry
B) In a secure ini file
C) In a group policy object
D) In a system policy object

Question 22

What type of accounts are created when Active Directory is not installed on Windows Server 2003?

A) Domain
B) Local
C) Enterprise
D) OUs

Question 23

How are new accounts set up for servers that do not use Active Directory?

A) MMC Local Users and Groups Snap-in
B) Computer Management tool
C) MMC Active Directory Users and Computers Snap-in
D) Both a and b
E) Both b and c

Question 24

Which functional area in the Windows Server 2003 is used to manage who can perform specific tasks on a server designated as a domain controller?

A) Domain controller
B) Domain member
C) Microsoft network client
D) Network security

Question 25

Which of the following operating systems are capable of monitoring unsuccessful logon attempts?

A) Windows Server 2003
B) NetWare 6.x
C) Mac OS X
D) Both a and b
E) Both a and c

Question 26

How many characters does Windows 2000 limit its user account names to?

A) 15
B) 20
C) 128
D) 256

Question 27

Nonlocal GPOs apply to which of the following?

A) Sites
B) Domains
C) OUs
D) All of the above

Question 28

Which functional area in the Windows Server 2003 is used to manage authentication options when NTLM is used instead of Kerberos for older clients?

A) Microsoft network server
B) Network access
C) Network security
D) System cryptography

Question 29

Administrative templates are preconfigured group policies for which of the following?

A) Client connectivity
B) Using Software
C) Managing Accounts
D) Both a and b
E) Both b and c

Question 30

Which functional area in the Windows Server 2003 is used to control the use of keys and algorithms for encryption?

A) Network security
B) System cryptography
C) System objects
D) System security

Question 31

Which preconfigured Windows Server 2003 administrative template is used for managing desktop settings that are common to all of Windows 95, 98, and NT?

A) Common.adm
B) Inetres.adm
C) Inetcorp.adm
D) System.adm

Question 32

Which preconfigured Windows Server 2003 administrative template is used for managing Windows 95 and 98 clients?

A) Conf.adm
B) System.adm
C) Winnt.adm
D) Windows.adm

Question 33

Which operating system may come configured to automatically boot into an account without an account or password screen enabled?

A) Windows XP Professional
B) Red Hat Linux
C) Netware 6.x
D) Both a and b
E) Both a and c

Question 34

Which preconfigured Windows Server 2003 administrative template is used for managing Internet Explorer in Windows 2000 Professional clients?

A) Inetcorp.adm
B) Inetres.adm
C) Inetset.adm
D) System.adm

Question 35

Which functional area in the Windows Server 2003 is used to require digitally signed communications with the server and to control what happens when a user's session is idle or when the logon hours expire?

A) Microsoft network client
B) Microsoft network server
C) Network access
D) Network security

Question 36

Which functional area in the Windows Server 2003 is used to govern the certificate rules that are used on applications?

A) Devices
B) Network security
C) System cryptography
D) System settings

Question 37

_____ is a set of basic user account and computer parameters that can be configured using Poledit.exe.

A) User policy
B) System policy
C) Account policy
D) Group policy

Question 38

Which User Configuration component controls access to Logon/Logoff capabilities, scripts, and Task Manager functions?

A) Desktop
B) Network
C) System
D) Control Panel

Question 39

On which of the following can you set a group policy?

A) Site
B) Domain
C) User
D) Both a and b
E) a, b, and c

Question 40

Which preconfigured Windows Server 2003 administrative template is used for dial-up, language, and temporary Internet files settings in Internet Explorer?

A) Inetcorp.adm
B) Inetres.adm
C) Inetset.adm
D) Conf.adm

Question 41

In Red Hat Linux, are the group names that a user belongs to included in the /etc/passwd file?

Question 42

Which account properties tab enables you to enter or modify personal information about the account holder , including the first name and last name?

A) Address
B) General
C) Account
D) Profile

Question 43

Which user account option should be used for a utility account needed to run a program process?

A) Password never expires
B) User cannot change password
C) Account is disabled
D) None of the above

Question 44

Which useradd command parameter gives an account description?

A) -c
B) -d
C) -e
D) -f

Question 45

How are new accounts set up for servers that use Active Directory?

A) MMC Local Users and Groups Snap-in
B) Computer Management tool
C) MMC Active Directory Users and Computers
D) Active Directory Users and Computers option on the Administrative Tools menu
E) Both c and d

Question 46

Which of the following tabs is available only in Windows Server 2003?

A) Terminal Services Profile
B) Remote Control
C) Environment
D) COM+

Question 47

Which account properties tab is used to add the account to an existing group of users?

A) Organization
B) Profile
C) Member Of
D) Sessions

Question 48

Which operating system uses the dialog in the figure above to configure password settings?

A) Windows Server 2003
B) Red Hat Linux
C) Mac OS X
D) Netware 6.x

Question 49

In Red Hat Linux, is every account a member of a least one group?

Question 50

What is the largest number that a Linux UID can be?

A) 20,000
B) 40,000
C) 60,000
D) 100,000

Question 51

Which operating system uses the dialog in the figure above to create accounts?

A) Windows Server 2003
B) Red Hat Linux
C) Mac OS X
D) Netware 6.x

Question 52

Which operating system uses the dialog in the figure above to create accounts?

A) Windows Server 2003
B) Red Hat Linx
C) Mac OS X
D) Netware 6.x

Question 53

Which of the following options is available in the account properties Address tab?

A) Street address
B) Postal code
C) State
D) Post Office Box
E) All of the above

Question 54

In Red Hat Linux, is an account enabled by default even if there is no password specified when the account is created?

Question 55

Which account properties tab provides information about the logon name, domain name, and account options?

A) General
B) Account
C) Address
D) Environment

Question 56

Which useradd command parameter specifies an account expiration date?

A) -p
B) -G
C) -M
D) -e

Question 57

Which account properties Dial-in tab option enables the server to verify that a call is from a known location?

A) Allow access
B) Callback security
C) Static routing
D) None of the above

Question 58

Which useradd command parameter designates the default shell associated with the account?

A) -q
B) -R
C) -s
D) -f

Question 59

If the payroll supervisor of a company decides to leave the company, should the administrator disable his or her account?

Question 60

Is the option "User must change password at next logon" necessary for accounts used by the server administrator in WIndows 2003?

Question 61

Windows 2000/XP Professional is designed to support a maximum of 2 simultaneous _________________________ users using a dial-up connection.

Question 62

When you have a specialized security need, consider the ____________________ group policies as one of the first places to look to fulfill that need.

Question 63

The Windows XP Professional ____________________ account is used for remote desktop help.

Question 64

Is the Mac OS X Server Admin tool a tool for managing users, groups, and computers that access the server?

Question 65

Are security and other properties that are associated with specific accounts in NetWare configured through user templates before accounts are created?

Question 66

What are the four ways the Mac OS X can be customized for different logon options?

Question 67

Windows 2000 group policy has evolved from the Windows NT Server 4.0 concept of ____________________.

Question 68

The ____________________ template is used to manage how Windows updates are performed through the Internet.

Question 69

In UNIX/Linux systems, what seven pieces of information does the password file contain?

Question 70

List three conventions for account names based on the user's actual name.

Question 71

In Windows Server 2003, ____________________ generally relate to managing server or Active Directory functions.

Question 72

Does Windows 2000 Server allow the administrator to set the account lockout option, so that an account is inaccessible for a specified time after a specified number of unsuccessful attempts to log on?

Question 73

What password restriction information is contained in the shadow file?

Question 74

____________________ accounts not only provides orderly access to server and network resources, it also enables server administrators to maintain security by monitoring which users are accessing the server and what resources they are using.

Question 75

Can ConsoleOne be run from a workstation under the Remote Console NLM?

Question 76

The ____________________ functional area is used to manage security functions used by members of a domain (e.g., using digital encryption options).

Question 77

The most efficient way to assign user rights is to assign them to ____________________ instead of to individual user accounts.

Question 78

What two important tools are included with Mac OS X Server that enable server management?

Question 79

Do common slang terms make strong passwords?

Question 80

In UNIX/Linux, when two or more groups use the same ______________________________, there is a serious security risk.