Final-CH 11

What is the level of encryption of the public/private key pair that is contained in the domain-server-CA in Microsoft Server 2019?\

2048-bit encryption

By default, where are updates synchronized from in WSUS?

Microsoft Update servers on the Internet

Denali wants to store information about all Windows updates on a specific Microsoft SQL Server for security reasons. Which of the following wizards can Denali use to set up SQL Server Connectivity to store update information?

The Add Roles and Features Wizard

To prevent man-in-the-middle attacks, Janet, a network administrator, configures a GPO such that all the traffic sent toward a specific database server is encrypted using IPSec.

The computers did not have an IPSec certificate.

Yosef has configured Windows Server 2019 as an enterprise CA and deployed a GPO to enroll all the users for certificates. Which of the following permissions to the certificate template is most likely to be missing for the five users who did not get enrolled?

Autoenroll

If a newly created firewall allows connection to a program only if the connection is authenticated by IPSec, which of the following options was most likely selected in the Action pane in the New Inbound Rule Wizard at the time of creating the rule?

Allow the connection if it is secure

Amber is a hacker who steals information when people enter their personal details on specific websites. Which type of hacking attack is Amber perpetrating?

A man-in-the-middle attack

Fatima is configuring a Windows Server 2019 system as a RADIUS server for use with 802.1X. What is the next step Fatima should take once the server role has been configured?

Activate the server in Active Directory

Ramona, the chief technical officer of an engineering company, needs to install software on 32-bit computers using GPO. How can Ramona ensure that the software is installed only on the 32-bit computers?

By using a WMI filter

Having heard the data theft suffered by a competing company by a man-in-the-middle attack. Which of the following should Talia do to ensure that Finn's company is protected from such attacks?

Hire the services of a third-party Certification Authority

XM GraFix, a graphics design company, has bought new design software.

Published the software under Software Settings in the User Configuration

Sasha is configuring Windows Server 2019 as an enterprise CA. She installs the Active. Which of the following role services should Sasha select to ensure that routers are allowed to obtain certificates?

The Network Device Enrollment Service role service

Which of the following settings in Windows defender should be enabled to prevent malware and network attacks from accessing high-security processes in systems that support core isolation?

The memory integrity setting

Giselle, a systems administrator, creates a file redirection GPO, in the User Configuration section that automatically saves files created by her colleagues to a shared network device instead of the local drives in their computers. What do you see as the issue with the GPO configuration?

The settings can only be applied at the next login.

Amina, who works for a pharmaceutical company, configures and issues the Smartcard Logon certificate template with schema version 2. Identify the most likely reason auto-enrollment failed for these users.

Their operating system is Windows 2000.

Chynna wants to create two different firewall rules that are applicable depending on whether a computer is connected to a corporate domain or a home network. Which of the following panes in the New Inbound Rule Wizard should Chynna select to specify the conditions that should be met before the rules can be applied?

What do you see to be the problem here?

Navin wants to reduce the chances of a data breach and monitor and control the traffic on his company's website. Which of the following options must Navin select and configure when configuring WSUS?

Use a proxy server when synchronizin

While configuring Windows Server 2019 as a WSUS server, which of the following role services would you select to store information about updates in the Windows Internal Database?

WID connectivity

The new system administrator of XYZ company realizes that whenever updates are available for Windows, WSUS redirects. Which of the following is a likely reason for this issue?

While installing WSUS, the option Store updates in the following location was deselected.

Stephen sets up manual enrollment for a user certificate from an enterprise CA. Which of the following commands did Stephen most likely type in the Command Prompt window?

certlm.msc