MCSE 70-298: Designing Network Security 2

Question 1

Which certificate type is required for EFS recovery agents in a Windows Server 2003 PKI environment?

Accepted Answer

EFS Recovery Agent certificate

Answer

The EFS Recovery Agent certificate grants designated accounts the ability to decrypt EFS-protected files if the original encrypting user's key is lost.

Question 2

What is the function of an Enterprise Root CA in a Windows Server 2003 PKI hierarchy?

Accepted Answer

Issues certificates to subordinate CAs and is the trust anchor for the entire PKI

Answer

The Enterprise Root CA sits at the top of the PKI hierarchy and signs the certificates of subordinate CAs; it should be kept offline to protect the root private key.

Question 3

Which auditing category should be enabled to track failed logon attempts in Windows Server 2003?

Accepted Answer

Audit account logon events

Answer

Enabling 'Audit account logon events' with failure auditing records failed authentication attempts, helping detect brute-force or credential-stuffing attacks.

Question 4

What is the purpose of 802.1X authentication in a wired or wireless network security design?

Accepted Answer

Requires devices to authenticate before gaining network access

Answer

802.1X is a port-based network access control standard that requires clients to authenticate (typically via RADIUS) before being granted network access.

Question 5

Which Windows Server 2003 service acts as a RADIUS server to centralize network access authentication?

Accepted Answer

Internet Authentication Service (IAS)

Answer

Internet Authentication Service (IAS) is Microsoft's RADIUS server implementation that centralizes authentication, authorization, and accounting for network access.

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE 70-298: Designing Network Security 2