7. Manage Security

Which of the following can block all incoming and outgoing connections based on its configuration?

Windows Firewall with Advanced Security

Which of the following parameters displays the help option at the command prompt in Windows Server 2012?

/?

Which of the following is used to prevent a brute force attack on user passwords?

Account lockout

You create a GPO and link it to the Sales OU. You want to monitor users in the Sales OU who connect to the file server. What type of auditing do you enable?

Audit Logon Events

Which of the following statements regarding auditing and Active Directory is false?

Auditing prevents users from attempting to guess passwords.

Which of the following is used to display information about audit policies and to perform functions to manipulate them?

Auditpol

Which of the following is the syntax used for the auditpol command?

Auditpol command [<sub-command0><options>]

Which of the following enables a user to create targeted audit policies by using expressions on the basis of user, computer, and resource claims in Windows Server 2012?

Dynamic Access Control

Which of the following features enhances the legacy access control model?

Dynamic Access Control

Which feature enables an administrator to apply access-control permission to devices?

Dynamic access control

Alexis is a system administrator for an Active Directory environment that contains four domains. Recently, several managers have reported suspicions about user activities and have asked her to increase security in the environment. Specifically, the requirements are as follows: Audit changes to User objects that are contained within a specific OU. Allow a special user account called Audit to view and modify all security-related information about objects in that OU. Which of the following steps should Alexis take to meet these requirements? (Choose all that apply.

Enable auditing with the Active Directory Users and Computers tool. Specify auditing options for the OU using the Active Directory Users and Computers tool. Use the Delegation of Control Wizard to grant appropriate permissions to view and modify objects within the OU to the Audit user account.

Crystal is a system administrator for an Active Directory environment that is running in Native mode. Recently, several managers have reported suspicions about user activities and have asked her to increase security in the environment. Specifically, the requirements are as follows: The accessing of certain sensitive files must be logged. Modifications to certain sensitive files must be logged . System administrators must be able to provide information about which users accessed sensitive files and when they were accessed. All logon attempts for specific shared machines must be recorded. Which of the following steps should Crystal take to meet these requirements? (Choose all that apply.)

Enable auditing with the Active Directory Users and Computers tool. View the audit log using the Event Viewer tool. Enable failure and success auditing settings for specific files stored on NTFS volumes. Enable failure and success auditing settings for logon events on specific computer accounts.

Which of the following can be used to create expression-based audit policies in Windows 2012?

Global Object Access Auditing

Which of the following account types is the built-in user account?

Guest

Which of the following security mechanisms allows network traffic through firewalls?

IPsec

You are the network administrator for your organization. A new company policy has been released wherein if a user enters their password incorrectly three times within five minutes, they are locked out for 30 minutes. What three actions do you need to set to comply with this policy? (Choose all that apply.)

Set Account Lockout Duration to 30 minutes. Set the Account Lockout Threshold setting to three invalid logon attempts. Set the Reset Account Lockout Counter setting to five minutes.