Unit 5 Problem Set 1

Baldeo Persaud
NT 1230
Unit 5 Problem Set 1
Matching
Complete the following exercise by matching the terms with their corresponding definitions.
a. automated password guessing
b. Windows authorization mechanism
c. passwords plus smartcards
d. stored in a digital certificate
e. standard for smart card support
f. decrypts data encrypted with a certificate
g. firewall exceptions
h. standard for fingerprint scanners and other devices
i. potentially destructive software
j. firewall rule requiring IPsec
___C____ 1. multifactor authentication
___I____ 2. malware
___A____ 3. brute force
___E____ 4. Personal Identity Verification (PIV)
____F___ 5. private key
___H____ 6. Windows Biometric Framework
___B____ 7. user rights
___J____ 8. authenticated exception
___D____ 9. public key
___G____ 10. Rules

Multiple Choice
Select one or more correct answers for each of the following questions. 1. Which of the following account lockout policy modifications could you make to ensure that user passwords cannot be intercepted by analyzing captured packets? a. Increase the Enforce Password History value b. Enable the Password Must Meet Complexity Requirements setting c. Decrease the Account Lockout Threshold value d. Disable the Store Passwords Using Reversible Encryption policy 2. Which of the following mechanisms is most often used in firewall rules to allow traffic on to the network? a. hardware addresses b. IP addresses c. protocol numbers d. port numbers 3. Which of the following NTFS features is incompatible with EFS encryption? a. compression b. IPsec c. permissions d. parental controls
4. Which of the following command-line parameters will prevent a program executed using
Runas.exe from accessing the elevated user’s encrypted files? a. /env b. /noprofile c. /showcred d. /profile 5. Which of the following actions can you NOT perform from the Windows Firewall control panel? (Choose all that apply.) a. Allow a program through the firewall in all three profiles b. Manage firewall exceptions for the domain profile c. Create firewall exceptions based on port numbers d. Turn Windows firewall off for all three profiles 6. Which of the following policy modifications would make it harder for intruders to penetrate user passwords by a brute force attack? (Choose all that apply.) a. Increase the value of the Reset Account Logon Counter After policy b. Enable the Password Must Meet Complexity Requirements policy c. Increase the Account Lockout Threshold value d. Reduce the value of the Minimum Password Age policy 7. Connection security rules require that network traffic allowed through the firewall use which of the following security mechanisms? a. EFS b. IPsec c. UAC d. PIV 8. Which of the following statements about Windows Defender is true? a. Windows Defender uses rules that you create to control its scans. b. Windows Defender can detect spyware that is already present on the system, but it cannot prevent the infiltration of new spyware. c. Windows Defender eliminates the need for third-party anti-virus software. d. Windows Defender requires definition updates that are supplied free with the regularly scheduled Windows Update downloads. 9. Which of the parental controls has been removed from Windows 7? a. Application restrictions b. User time limits c. Restricted access to games
d. Internet filtering 10. The built-in local groups on a Windows 7 workstation receive their special capabilities through which of the following mechanisms? a. parental controls b. Windows firewall rules c. NTFS permissions d. user rights