Solutions 14-1
Guide to MCSE 70-290, Enhanced
Chapter 14 Solutions
Review Questions
- Which of the following Event Viewer log files are success and failure events written to?
Answer: B - What is the default size of the Security log on a Windows Server 2003 system?
Answer: C - Which of the following is not a default security template included with Windows Server 2003?
Answer: D - Which of the following audit settings should be configured to audit access to files and folders?
Answer: C - Which of the following audit settings should be configured to audit server reboots?
Answer: A - Which of the following audit settings should be configured to audit the creation of group objects?
Answer: B - Which of the following audit settings should be configured to audit successful password changes?
Answer: A - No auditing settings are configured for domain controllers by default on Windows Server 2003 systems. (True or False?)
Answer: B - Which of the following security features is used to encrypt data as it is transmitted over a network?
Answer: A - Which of the following security features is used to encrypt files and folders stored on an NTFS volume?
Answer: B - Which of the following security features is used to validate the identity of a user on a Windows Server 2003 network?
Answer: B - Which of the following security features is used to secure files and folders on an NTFS partition?
Answer: A - Which of the following security templates contains the default security settings applied to a Windows Server 2003 system by default?
Answer: A - Security template settings can be applied via Group Policy. (True or False?)
Answer: A - Which of the following command-line tools can be used to create and apply security templates?
Answer: B - Which of the following is not a supported switch with the SECEDIT command in Windows Server 2003?
Answer: D - Where are security templates stored by default on a Windows Server 2003 system?
Answer: A,B,C - Which of the following MMC snap-ins can be used to compare current server security settings to those stored in a security template?
Answer: A - Which security template is automatically applied to a Windows Server 2003 system when it is promoted to the role of domain controller?
Answer: A - True or False? It is possible to configure access control settings on Active Directory objects such as user accounts. (True or False?)
Answer: A
Case Projects
Case Study 1
The tool to create new templates would be the Security Templates MMC snap-in. Once configured, the most efficient way to distribute these settings would be via Group Policy.
Case Study 2