MCSE 70-298: Designing Network Security

Question 1

Which security template in Windows Server 2003 provides the highest level of security but may break legacy application compatibility?

Accepted Answer

hisecws.inf

Answer

securedc.inf

Answer

setup security.inf

Answer

compatws.inf

Question 2

What is the purpose of a DMZ (Demilitarized Zone) in network security design?

Accepted Answer

Isolates publicly accessible servers from the internal private network

Answer

Provides VPN access for remote users

Answer

Stores backup copies of domain controllers

Answer

Segments wireless from wired clients

Question 3

Which feature of Windows Server 2003 IPSec allows you to require encryption for all traffic between two specific servers?

Accepted Answer

IPSec policy with Require Security rule

Answer

TCP/IP filtering

Answer

Windows Firewall with exceptions

Answer

Network Monitor capture filter

Question 4

What is the minimum Kerberos ticket lifetime that Microsoft recommends to prevent replay attacks?

Accepted Answer

5 minutes

Answer

1 minute

Answer

30 minutes

Answer

1 hour

Question 5

Which tool is used to analyze the current security configuration of a Windows Server 2003 system against a security template?

Accepted Answer

Security Configuration and Analysis

Answer

Group Policy Object Editor

Answer

Local Security Policy

Answer

System Monitor

Question 6

What does EFS (Encrypting File System) protect against in Windows Server 2003?

Accepted Answer

Unauthorized access to files when the OS is bypassed (e.g., boot from another disk)

Answer

Network interception of data in transit

Answer

Brute-force password attacks

Answer

Denial of service attacks