1
Security+ Guide to Network Security, Second Edition Lab Manual Solutions 8-
Chapter 8 Lab Manual Review Questions and Answers
Lab 8.1
1. What file systems are compatible with Windows NT Server 4.0? (Choose all that apply.)
a. FAT
b. FAT32
c. OSPF
d. NTFS
2. Which of the following are features of NTFS version 5 that are not available with FAT partitions? (Choose all that apply.)
a. share-level security
b. file-level security
c. compression
d. encryption
3. Which of the following commands converts a FAT partition to NTFS?
a. update C: /FS:NTFS
b. upgrade C: /FS:NTFS
c. convert C: /FS:NTFS
d. convert C: /NTFS
4. What permissions are available for Windows folder shares? (Choose all that apply.)
a. Read
b. Modify
c. Change
d. Full Control
5. Once a FAT partition has been converted to NTFS, the only way to change it back to FAT is to rebuild the drive and restore it from a backup. True or False?
Answers: (a, d), (b, c, d), c, (a, c, d), True
Lab 8.2
1. Data confidentiality is best defined as ______.
a. data that has not been tampered with intentionally or accidentally
b. data that has been scrambled for remote transmission
c. data that is secured so only intended users have access
d. data that can be accessed when it is needed
2. When comparing the Full Control and Modify NTFS permissions, what differentiates the two?
a. Full Control is exactly the same as Modify.
b. Full Control allows you to change permissions and ownership.
c. Modify only allows changes, while Full Control allows changes as well as deletions.
d. Modify allows you to change permissions and ownership.
3. A safeguard in Windows NT/2000/2003 allows administrators to access data even if they have been explicitly denied. How is this possible?
a. Administrators can take ownership and change the permissions to allow access.
b. Administrators can log on as a user with permissions and grant themselves access.
c. Administrators cannot be denied access to data.
d. This safeguard does not exist; administrators can be denied access to data.
4. When NTFS permissions are combined with other NTFS permissions, what are the effective permissions?
a. most restrictive
b. least restrictive
5. When NTFS permissions are combined with share permissions, what are the effective permissions?
a. most restrictive
b. least restrictive
Answers: c, b, a, b, a
Lab 8.3
1. Data availability is best defined as ______.
a. data that has not been tampered with intentionally or accidentally
b. data that has been scrambled for remote transmission
c. data that is secured so only intended users have access
d. data that can be accessed when it is needed
2. What technologies can be used to help reduce downtime and increase the time that data is readily available? (Choose all that apply.)
a. backups
b. clustering
c. load balancing
d. RAID
3. A user took a leave of absence from your company for personal reasons. A junior administrator deleted the user’s account from Active Directory. To fix the problem, the junior administrator re-created the account. When the user returned to work, he could not access any of his files. What is the cause?
a. Accounts with the same name should work; that is not the cause of the problem.
b. The user’s account had expired.
c. The user’s password did not comply with the domain security policy.
d. Even though the two accounts have the same name, the SIDs are different.
4. How can data confidentiality affect data availability?
a. They are two independent areas that do not affect each other.
b. For data to be available, it cannot be confidential.
c. Data that is secured too strongly might conflict with the availability.
d. Data that is secured too weakly might conflict with the availability.
5. What percentage of downtime would be acceptable for an e-commerce business?
a. 95%
b. 100%
c. 0%
d. 50%
Answers: d, (a, b, c, d), d, c, c
Lab 8.4
1. Data integrity is best defined as ______.
a. data that has not been tampered with intentionally or accidentally
b. data that has been scrambled for remote transmission
c. data that is secured so only intended users have access
d. data that can be accessed when it is needed
2. Data integrity can be damaged by which of the following? (Choose all that apply.)
a. viruses
b. worms
c. hackers
d. Trojan horses
3. An administrator restores a folder of files at the request of the folder’s owner. Two days later the user calls the Help desk to complain that some data is missing from files that were updated two weeks ago. What could have happened?
a. The restore failed and corrupted the data.
b. The restore was successful but restored some files that should not have been restored.
c. The original backup was corrupt.
d. The user’s files were infected with a virus.
4. Data integrity can be threatened by environmental hazards such as dust, surges, and excessive heat. True or False?
5. Which of the following helps maintain data integrity? (Choose all that apply.)
a. disaster recovery plans
b. an equipment standards policy
c. system documentation
d. preventive maintenance
Answers: a, (a, b, c, d), b, True, (a, b, c, d)
Lab 8.5
1. Encryption is best defined as ______.
a. data that has not been tampered with intentionally or accidentally
b. data that has been scrambled
c. data that is secured so only intended users have access
d. data that can be accessed when it is needed
2. In Windows Server 2003, who can access encrypted files? (Choose all that apply.)
a. the owner of the files
b. the administrator
c. the recovery agent
d. all users
3. If data that is encrypted with NTFS encryption is copied to a FAT partition, the data is decrypted. True or False?
4. What is the Windows Server 2003 command-line utility that can be used to encrypt data?
a. Crypto
b. EncryptIt
c. Encrypt
d. Cipher
5. You have decided to use NTFS encryption to enhance security on your network of six servers. Five of the six servers have compressed drives, and a new administrator says that it would not be a good idea to implement an encryption policy now. Why is or isn’t the administrator correct?
a. The administrator is not correct; encryption helps secure your network.
b. The administrator is not correct; encryption decreases the performance of the servers, but is not noticeable to the users.
c. The administrator is correct; encryption adds too much overhead to the servers.
d. The administrator is correct; encryption and compression cannot be used at the same time.
Answers: b, (a, b, c), True, d, d