Lab Assessment: Password Policy and MBSA Scan

Overview
In this lab, you used group policy objects to create a minimum password length password policy and link it to the newly created domain from the previous lab. You also ran the Microsoft® Baseline Security Analyzer
(MBSA) and reviewed the results of the MBSA scan.

Lab Assessment Questions & Answers 1.
Describe two options you would enable in a Windows Domain password policy.

minimum password length set and password that has to have numbers, upper and lowercase, and symbols 2. there a setting in your GPO to specify how many logon attempts will lock out an account? Name two
Is

parameters that you can set to enhance the access control to the system. yes there is, you can set where the user has to change their password every 30 days and have security questions

4 system access? make sure they have at least one number, one uppercase, and lowercase, maybe add a character. don't use a common password that anyone could guess, don't use personal information either. dont use any old passwords you may have used in the past as well

37609_LB04_Pass5.indd 65

Configure Group Policy
Objects and Microsoft® Baseline
Security Analyzer (MBSA)

3.
What are some password policy parameter options you can define for GPOs that can enhance the CIA for

23/04/13 11:01 AM

66

Lab #4 | Configure Group Policy Objects and Microsoft® Baseline Security Analyzer (MBSA) 4. If the virtual lab had direct Internet access, from what sources could you use as a source to perform the MBSA security state?

can always go to the Microsoft update website through the internet

5.
What does WSUS stand for, and what does it do?

Windows Server Update Service and downloads updates for microsoft

6.
What is the difference between MBSA and Microsoft® Update?

Microsoft update checks for updates for the any Microsoft updates are available while MBSA scans for security vulnerabilities in Microsoft

7.
What are some of the options that you can exercise when using the MBSA tool?

you can check for security updates and administrative vulnerabilities

8.
Describe why change control management might be relevant to security operations in an organization.

change control can prevent possibility of services being interrupted, this allows you to plan so no service is interrupted. it documents where changes are made