Download Windows Security and Patch Management and more Exams Nursing in PDF only on Docsity!
FEDVTE - WINDOWS OPERATING SYSTEM EXAM ACTUAL EXAM COMPLETE
QUESTIONS WITH VERIFIED ANSWERS CURRENTLY TESTING VERSIONS AND
SOLUTIONS GRADED A+ NEWEST EXAM!!
Which one of the following could be categorized as a misconfiguration? A. Failure to set quotas for the group members and then the members overload the file server in an accidental DoS attack B. Mistakenly adding an account to a wrong group C. Accidentally setting the Everyone group to full control on a share drive D. All of the above D. All of the above A logical Patch Management process is a one-time process that businesses should establish to ensure success. A. True B. False B. False Network Access Protection (NAP) is a Windows feature that provides which one of the following? A. Automatic Remediation
B. Non-current Compliance C. Health State Invalidation D. None of the above A. Automatic Remediation A Virtual Private Network allows two systems to connect over a public network and have the assurance of which of the following? A. Confidentiality B. Authentication C. Integrity D. All of the above D. All of the above Which Active Directory Certificate Service (AD CS) server role allows routers and other network devices that do not have a domain account to obtain certificates? A. Certificate Enrolment Web Service B. Online Responder C. Certificate Enrolment Policy Web Service
B. Audit Logoff C. Audit Network Policy Server D. All of the above D. All of the above Which Internet Protocol Security (IPsec) protocol provides confidentiality by encrypting data? A. Internet Key Exchange (IKE) B. Authentication Header (AH) C. Encapsulating Security Payload (ESP) D. All of the above C. Encapsulating Security Payload (ESP) Which one of the following default rights can be performed by a member of the Windows User Group? A. Increase a process working set B. Allow logons through the Remote Desktop Services C. Create global objects D. Load and unload device drivers A. Increase a process working set
Which one of the following is required for Windows BitLocker configuration? A. Trusted Platform Module (TPM) B. Hardware Security Module C. UEFI (Unified Extensible Firmware Interface) D. None of the above A. Trusted Platform Module (TPM) Which option is best for a server to connect to a network? A. Wired B. Wireless C. Virtual Private Network D. None of the above A. Wired In a Kerberos Authentication process which one of the following sends a Ticket Granting Ticket secret key and a session key as a function? A. TGS_RESPONSE B. AS_RESPONSE
Which one of the following creates and manages and exports (for deployment) security policies across multiple Windows operating systems roles and Microsoft applications? A. Microsoft Security Configuration Wizard B. Microsoft Security Compliance Manager C. Security Templates D. Group Policy B. Microsoft Security Compliance Manager In the Windows Registry what is a collection of discrete files called? A. Programs B. Hives C. Keys D. Trees B. Hives We have an expert-written solution to this problem! Which method can start PowerShell in Windows 8? A. > All Programs > Accessories > Windows PowerShell Folder > Windows PowerShell B. Charm > Search > type PowerShell > click Windows PowerShell
C. In Server Manager: Tools menu > Windows PowerShell D. All of the above B. Charm > Search > type PowerShell > click Windows PowerShell In a Hardening Process which method uses plaintext files containing software and driver installation configuration settings? A. Security Templates B. Microsoft Baseline Security Analyzer C. Security Compliance Manager Toolkit (SCM) D. Group Policy A. Security Templates We have an expert-written solution to this problem! Which one of the following can be managed through group policies (GPO)? A. Authentication settings B. Software installation and update C. IPsec connections D. All of the above D. All of the above
B. Get-ChildItems C. Get-Service D. None of the above A. Get-WmiObject Which type of permissions are created by default on non child objects or based by user assignment? A. Inherited B. Standard C. Effective D. Explicit D. Explicit Which one of the following is a benefit of Dynamic Access Control? A. Improves productivity B. Data is protected at the appropriate level C. Content owners have control over their data D. All of the above D. All of the above
Which Dynamic Access Control capability allows for "safety net" policies? A. Centralize Access Policies B. Data Classification C. Centralized Auditing D. Rights Management Service A. Centralize Access Policies Authenticode is a means of code signing that allows users to verify the source and author of the signed software. A. True B. False B. False Which method scans systems to identify common security misconfigurations and missing security updates? A. Microsoft Security Configuration Wizard B. Microsoft Security Compliance Manager C. Microsoft Baseline Security Analyzer D. Group Policy C. Microsoft Baseline Security Analyzer
Which execution mode has unrestricted access to the underlying hardware? A. Kernel B. Operating System C. User D. Guest A. Kernel Microsoft Security Configuration Wizard is a management tool that is based upon machine roles such as a file server a print server a domain controller etc. A. True B. False A. True Which solution is best to avoid downloading an untrusted patch? A. Disable automatic updates B. Check for updates on a trusted network C. Verify the source of the update D. All of the above D. All of the above
During which step of Microsofts recommended Update Management Process would an update be tested? A. Assess B. Identify C. Evaluate and Plan D. Deploy C. Evaluate and Plan User Account Control (UAC) was introduced in Windows XP and Server 2003. A. True B. False B. False Which vulnerability allows remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file? A. Print Spooler - CVE- 2013 - 0011 B. Kernel Mode Driver - CVE- 2012 - 4786 C. Microsoft XML - CVE- 2013 - 0007 D. Use After Free - CVE- 2012 - 4969
B. False A. True Which type of attacker has actions that are considered noble by the attacker but could cause more harm than good? A. White Hat B. Black Hat C. Red Hat D. Gray Hat D. Gray Hat Which one of the following DLL file handles the memory management? A. User32.dll B. Kernel32.dll C. Gdi32.dll D. None of the above B. Kernel32.dll Which value in the PowerShell "execution policy" allows loading of all configuration files and scripts? A. AllSigned
B. Unrestricted C. Undefined D. RemoteSigned B. Unrestricted Which one of the following steps is not part of securing the Microsoft patch process? A. Always validate patches B. Apply patches while on the road C. Harden the WSUS server D. Ensure ALL software is patched not just Microsoft B. Apply patches while on the road Which Network Access Protection (NAP) client collects and maintains a system health status? A. System Health Agent B. NAP Agent C. NAP Enforcement Client D. None of the above B. NAP Agent
We have an expert-written solution to this problem! Which Active Directory Certificate Service (AD CS) server role allows routers and other network devices that do not have a domain account to obtain certificates? B. Online Responder D. Network Device Enrollment Service Which key command in PowerShell shows an objects methods and properties? All of the above Which one of the following steps is not part of securing the Microsoft patch process? Apply patches while on the road Of the following methods which one is a tool that centrally manages and configures Windows operating systems and applications and user settings? Group Policy In which one of the Social Engineering stages would you establish credibility? Relationship Development Microsoft Security Configuration Wizard is a management tool that is based upon machine roles such as a file server a print server a domain controller etc. True
Which option is best for a server to connect to a network? Wired Authenticode is a means of code signing that allows users to verify the source and author of the signed software. False Which type of permissions are created by default on non child objects or based by user assignment? Explicit Which one of the following could be categorized as a misconfiguration? All of the above Which one of the following is a Windows Firewall advantage? B. Provides a very granular customization of applications C. Can be configured with Netsh or PowerShell What are the four service startup types? Manual; Automatic; Automatic (Delayed); Disabled Which method can start PowerShell in Windows 8?
