Testout Security Plus Labsim 9

9.10.5 Allow SSL Connections You are the IT security administrator for a small corporate network. You currently run a website on the CorpWeb server. You want to allow SSL connections to this website. In this lab, your task is to add a binding to the CorpNet website using the following settings: • Website: www.corpnet.com • Protocol: HTTPS • Port: 443

Task Summary Add a binding for HTTPS Use port 443 for HTTPS Use the www.corpnet.com certificate for SSL Explanation In this lab, your task is to add a binding to the CorpNet website using the following settings: • Website: www.corpnet.com • Protocol: HTTPS • Port: 443 • SSL certificate: www.corpnet.com Complete this lab as follows: 1. From Server Manager, select Tools > Internet Information Services (IIS) Manager. 2. Expand CorpWeb(CorpNet.com\Administrator) > Sites. 3. Select CorpNet.com. 4. In the Actions pane, select Bindings. 5. Select Add. 6. Under Type, select the protocol from the drop-down list. 7. Under Port, make sure 443 is displayed. 8. Select the appropriate SSL certificate from the drop-down list; then click OK. 9. Click Close.

9.8.3 Manage Certificates You work as the IT Administrator for a growing corporate network. You manage the certification authority for your network, which uses smart cards for controlling access to sensitive computers. Currently, the approval process dictates that you manually approve or deny smart card certificate requests. As part of your daily routine, you need to perform several certificate management tasks. Complete the following tasks on CorpCA: • Approve the pending certificate requests for smart card certificates. • Deny the pending Web Server certificate request for CorpSrv16. • User bchan lost his smart card. Revoke the certificate assigned to bchan.CorpNet.com using the Key Compromisereason code. • Unrevoke the CorpDev3 certificate.

Task Summary Approve pending certificate requests for smart card certificates Hide Details Issue the tsutton.corpnet certificate Issue the mmallory.corpnet certificate Deny the CorpSrv16 certificate request Revoke the bchan.corpnet.com certificate Hide Details Revoke the certificate Use Key Compromise for the reason Unrevoke the CorpDev3 certificate Explanation In this lab, you perform the following: • Approve the pending certificate requests for smart card certificates from tsutton and mmallory. • Deny the pending web server certificate request for CorpSrv16. • Revoke the certificate assigned to bchan.CorpNet.com using the Key Compromise reason code because bchan lost his smart card. • Unrevoke the CorpDev3 certificate. Complete this lab as follows: 1. From Server Manager, select Tools > Certification Authority. 2. Expand CorpCA-CA. 3. Approve a pending certificate as follows: a. Select Pending Requests. b. Maximize the dialog so you can see who the requests are from. c. Right-click the tsutton certificate request and select All Tasks > Issue. d. Right-click the mmallory certificate request and select All Tasks > Issue. 4. Deny a pending certificate request as follows: a. Right-click the CorpSvr16 request and select All Tasks > Deny. b. Click Yes to confirm. 5. Revoke a certificate as follows: a. Select Issued Certificates. b. Right-click the bchan certificate and select All Tasks > Revoke Certificate. c. From the Reason code drop-down list, select the reason code. d. Click Yes. 6. Unrevoke a certificate as follows: a. Select Revoked Certificates. b. Right-click the CorpDev3 certificate and select All Tasks > Unrevoke Certificate.

9.13.5 Back Up a Workstation You recently upgraded the Exec system from Windows 7 to Windows 10. You need to implement backups to protect valuable data. You would also like to keep a Windows 7-compatible backup of ITAdmin for good measure. In this lab, your task is to complete the following: • Configure a Windows 7-compatible backup on ITAdmin using the following settings: o Save the backup to the Backup (D:) volume. o Back up all of the users' data files. o Back up the C: volume. o Include a system image for the C: volume. o Do not set a schedule for regular backups. o Make a backup. • Configure the Exec system to create Windows 10-compatible backups using the following settings: o Save the backup to the Backup (E:) volume. o Back up files daily. o Keep files for 6 months. o Back up the entire Data (D:) volume. o Make a backup now.

Task Summary Create a Window 7 Compatible Backup on ITAdmin Hide Details Save the backup to the Backup (D:) volume Back up all user data Back up the C: volume Include a system image for the C: volume Do not set a schedule for regular backups Backup Created Configure Windows 10 Backups on Exec Hide Details Save the backup to Backup (E:) Volume Back up files daily Keep files for 6 months Back up the Data (D:) volume Make a backup now Explanation In this lab, you perform the following tasks: • Configure a Windows 7-compatible backup on ITAdmin using the following settings: o Save the backup to the Backup (D:) volume. o Back up all of the users' data files. o Back up the C: volume. o Include a system image for the C: volume. o Do not set a schedule for regular backups. o Make a backup. • Configure the Exec system to create Windows 10-compatible backups using the following settings: o Save the backup to the Backup (E:) volume. o Back up files daily. o Keep files for 6 months. o Back up the entire Data (D:) volume. o Make a backup now. Complete this lab as follows: 1. On ITAdmin, configure a Windows 7-compatible backup as follows: a. Right-click Start and select Control Panel. b. Select System and Security. c. Select Backup and Restore (Windows 7). d. Select Set up backup to perform a backup. e. Select Backup (D:) to save the backup and then click Next. f. Select Let me choose and then click Next. g. Select the data files and disks to include in the backup. h. Make sure that Include a system image of drives: (C:) is selected and then click Next. i. Select Change schedule to change the schedule for backups. j. Unmark Run backup on a schedule. k. Click OK. l. Select Save settings and run backup. 2. On Exec, configure Windows 10 backups as follows: a. From the top menu, select the Floor 1 location tab. b. Select Exec. c. Select Start. d. Select Settings. e. Select Update & security. f. Select Backup. g. Select Add a drive. h. Select Backup E:. i. Verify that Automatically back up my files is on. j. Select More options. k. Under Back up my files, select Daily. l. Under Keep my backups, select 6 months. m. Under Back up these folders, select Add a folder. n. Select the Data (D:) volume and select Choose this folder. o. Select Back up now

9.13.8 Back Up a Domain Controller You are an IT administrator for a growing corporate network. You want to back up the system state of your domain controllers to ensure a good backup of Active Directory in the event of a disaster. You need to configure regular backups on CorpDC4. Use Windows Server Backup to create a schedule and back up a server. Use Backup Schedule to set a daily schedule for regular backups. Use Backup Once to perform an immediate backup. In this lab, your task is to use Windows Server Backup to complete the following tasks: • Create a regular backup schedule for the CorpDC4 server using the following settings: o Backup type: Custom o Items to back up: System State o Backup frequency: Once a day o Backup time: 1:00 am o Backup location: \\CorpFiles12\Backup • Perform an immediate backup using the following custom settings: o Backup type: Custom o Items to back up: System State and Local Disk (C:) o Backup location: \\CorpFiles12\Backup

Task Summary Create a backup schedule Hide Details Items to back up: System State Backup schedule: Once a day at 1:00 a.m. Backup location: \\CorpFiles12\Backup Perform an immediate backup of the server Hide Details Items to back up: System State and Local Disk (C:) Backup location: \\CorpFiles12\Backup Explanation In this lab, your task is to use Windows Server Backup to complete the following tasks: • Create a regular backup schedule for the CorpDC4 server using the following settings: o Backup type: Custom o Items to back up: System State o Backup frequency: Once a day o Backup time: 1:00 am o Backup location: \\CorpFiles12\Backup • Perform an immediate backup using the following custom settings: o Backup type: Custom o Items to back up: System State and Local Disk (C:) o Backup location: \\CorpFiles12\Backup Complete this lab as follows: 1. Create a backup schedule as follows: a. In Server Manager, select Tools > Windows Server Backup. b. In the left pane, select Local Backup. c. In the Actions pane, select Backup Schedule. d. Click Next to begin the wizard. e. Select the backup type; then click Next. f. Select Add Items. g. Select the items to be backed up; then click OK. h. Select Next. 2. Select the backup frequency. 3. Select the backup time; then click Next. 4. Select Back up to a shared network folder; then click Next. 5. Click OK. 6. Enter the location of the shared folder; then click Next. 7. Click Finish. 8. Click Close. 9. Perform an immediate backup as follows: a. In the Actions pane, select Backup Once. b. Select Different options; then click Next. c. Select the backup type; then click Next. d. Select Add Items. e. Select the items to be backed up; then click OK. f. Select Next. g. Select Remote shared folder; then click Next. h. Enter the location of the shared folder; then click Next. i. Select Backup

9.7.8 Configure BitLocker with a TPM You are the IT security administrator for a small corporate network. The employee in Office 1 is working on a very sensitive project. Management is concerned that sensitive information would be compromised if the hard drive in the computer were stolen. As a result, you have been asked to encrypt the entire Local drive. The Office1 computer has a built-in TPM on the motherboard. In this lab, your task is to configure BitLocker drive encryption as follows: • Turn on TPM in the BIOS. • Activate TPM in the BIOS. • Turn on BitLocker for the Local Drive (C:) drive. • Save the recovery key to \\CorpServer\BU-Office1. • Run the BitLocker system check. • Encrypt the entire Local Drive (C:) drive.

Task Summary Enable the TPM Activate the TPM Turn On BitLocker for the System (C:) drive Save the recovery key on CorpServer Perform a BitLocker system check Explanation In this lab, you configure BitLocker drive encryption as follows: • Turn on TPM in the BIOS. • Activate TPM in the BIOS. • Turn on BitLocker for the Local Drive (C:) drive. • Save the recovery key to \\CorpServer\BU-Office1. • Run the BitLocker system check. • Encrypt the entire Local Drive (C:) drive. Complete this lab as follows: 1. Right-click Start and select Control Panel. 2. Select System and Security. 3. Select BitLocker Drive Encryption. 4. Select Turn on BitLocker next to C:. 5. Notice, at the bottom of the window, that Windows indicates that a TPM was not found. 6. Click Cancel. 7. Click Start. 8. Click Power. 9. Click Restart to restart Office1 and activate TPM. 10. When the TestOut logo appears, press Delete to enter the BIOS. 11. Turn on and activate TPM as follows: a. In the left pane, expand Security. b. Select TPM Security. c. In the right pane, select TPM Security to turn TPM security on. d. Click Apply. e. Click Activate. f. Click Apply. g. Click Exit. 12. Turn on BitLocker as follows: a. After Office1 finishes rebooting, right-click Start and select Control Panel. b. Select System and Security. c. Select BitLocker Drive Encryption. d. Next to C:, select Turn on BitLocker. Now Windows is able to begin the Drive Encryption setup. 13. Save the recovery key to \\CorpServer\BU-Office1 as follows: a. Select Save to a file to back up your recovery key to a file. b. Browse the network to \\CorpServer\BU-Office1 and click Save. c. After your recovery key is saved, click Next. 14. Select Encrypt entire drive; then click Next. 15. Leave the default setting selected when choosing the encryption mode and click Next. 16. Select Run BitLocker system check; then click Continue. 17. Select Restart Now. 18. When encryption is complete, click Close. 19. Open File Explorer and verify that the Local Disk (C:) drive shows the lock icon.

9.7.3 Encrypt Files with EFS You work as the IT security administrator for a small corporate network. Several employees share the computer in Office 1. You need to secure the contents of the D:\Finances folder so that unauthorized users cannot view the documents in the folder. You also need to allow Susan to access the latest spreadsheet file in the folder. In this lab, your task is to perform the following: • Encrypt the D:\Finances folder and all of its contents. • Add Susan as an authorized user for the D:\Finances\2017report.xls file. To encrypt

Task Summary Encrypt the D:\Finances folder and its contents Add Susan as an authorized user of the 2017report.xls Explanation In this lab, you perform the following tasks: • Encrypt the D:\Finances folder and all of its contents. • Add Susan as an authorized user for the D:\Finances\2017report.xls file. Complete this lab as follows: 1. From the taskbar, select File Explorer. 2. Select the D: volume. 3. Right-click the Finances folder and select Properties. 4. On the General tab, select Advanced. 5. Select Encrypt contents to secure data. 6. Click OK. 7. Click OK. 8. Make sure Apply changes to this folder, subfolder and files is selected; then click OK. 9. Double-click the Finances folder to authorize additional users for a file. 10. Right-click the file and select Properties. 11. On the General tab, select Advanced. 12. Select Details. 13. Select Add. 14. Select the user and click OK. 15. Click OK. 16. Click OK to close the Advanced Attributes dialog.

9.12.7 Configure Fault-Tolerant Volumes You are the IT administrator for a small corporate network. You have installed the Windows Server 2016 operating system on a server named CorpServer2. During this installation, you created a single partition that took up the entire first disk. You would like to add fault tolerance to the system volume and create an additional fault tolerant volume for storing data. Four additional, uninitialized hard disks have been installed in the server for this purpose. In this lab, your task is to complete the following: • On Disk 1, create a mirrored volume of the System (C:) volume to add fault tolerance. • Using Disk 2, Disk 3, and Disk 4, create a new volume that provides both fault tolerance and improved performance using the following settings: o Volume size: 2 TB o Drive letter: R o Format: NTFS o Volume label: Data You cannot create a RAID 5 volume from an existing volume.

Task Summary Mirror the C: drive Create a RAID 5 volume Hide Details Create the Data volume Create the volume as a RAID 5 volume Create a 2 TB volume Assign drive letter R to the new drive Format the volume with NTFS Explanation In this lab, you perform the following tasks: • On Disk 1, create a mirrored volume of the System (C:) volume to add fault tolerance. • Using Disk 2, Disk 3, and Disk 4, create a RAID 5 volume that provides both fault tolerance and improved performance using the following settings: o Volume size: 2 TB o Drive letter: R o Format: NTFS o Volume label: Data Complete this lab as follows: 1. Mirror an existing volume as follows: a. Right-click Start and select Disk Management. b. Click OK to initialize new disks. c. Maximize the Disk Management window to better view the volumes. d. Right-click the System (C:) volume and select Add Mirror. e. Select Disk 1 that will be used for the mirrored copy. f. Select Add Mirror. g. Click Yes to convert the basic disk to a dynamic disk. 2. Create a RAID 5 volume as follows: a. In Disk Management, right-click a disk with free space and select New RAID 5 Volume. b. Click Next. c. Under Available, holding down the Ctrl key, select Disk 3 and Disk 4 to be part of the new volume with Disk 2. d. Select Add. e. Click Next. f. From the drive letter drop-down dialog, select R; then click Next. g. Make sure that NTFS is selected as the file system. h. In the Volume label field, enter Data. i. Select Next. j. Click Finish to create the volume. k. Click Yes to convert the basic disk to a dynamic disk.