MCSE 70-299: Implementing Network Security 2

Question 1

Which Windows Server 2003 service must be running for IPSec policy to be applied to network traffic?

Accepted Answer

IPSec Policy Agent (IPSECPOL)

Answer

The IPSec Policy Agent service (also called IPSECPOL or PolicyAgent) retrieves and enforces IPSec policies on the local computer.

Question 2

What is the difference between an IPSec transport mode and tunnel mode?

Accepted Answer

Transport mode encrypts only the payload; tunnel mode encapsulates the entire IP packet

Answer

IPSec transport mode encrypts and authenticates the payload only, while tunnel mode encapsulates the entire original IP packet inside a new IP header — used for VPNs.

Question 3

Which Group Policy setting prevents users from installing device drivers without administrator approval?

Accepted Answer

Prevent installation of devices not described by other policy settings

Answer

This policy blocks unapproved hardware installations, reducing the risk of malicious or unauthorized devices being added to corporate computers.

Question 4

What type of attack does account lockout policy specifically help mitigate?

Accepted Answer

Brute-force password guessing

Answer

Account lockout policy limits the number of failed logon attempts before locking the account, making automated brute-force password guessing attacks ineffective.

Question 5

Which Windows Server 2003 feature allows administrators to restrict which software can run on a computer?

Accepted Answer

Software Restriction Policies

Answer

Software Restriction Policies use rules based on certificate, hash, path, or zone to control which applications are allowed or denied from running.

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE 70-299: Implementing Network Security 2