MCSE 70-299: Implementing Network Security

Question 1

Which command is used to apply a security template to a Windows Server 2003 system from the command line?

Accepted Answer

secedit /configure /db temp.sdb /cfg hisecws.inf

Answer

gpupdate /force

Answer

secpol.msc /apply

Answer

netsh advfirewall set

Question 2

What is the effect of setting the LAN Manager Authentication Level to 'Send NTLMv2 response only. Refuse LM & NTLM'?

Accepted Answer

Forces all authentication to use NTLMv2, blocking weaker LM and NTLM protocols

Answer

Disables all network authentication

Answer

Enables Kerberos for legacy systems

Answer

Allows only smart card logon

Question 3

Which tool can be used to test IPSec policy on a Windows Server 2003 computer and see active security associations?

Accepted Answer

ipseccmd show sas

Answer

netsh ipsec static show policy

Answer

netstat -a

Answer

secpol.msc

Question 4

What does enabling 'Restrict CD-ROM access to locally logged-on user only' accomplish in Windows Server 2003?

Accepted Answer

Prevents network users from accessing the local CD-ROM drive

Answer

Encrypts all data written to CD-ROM

Answer

Audits all CD-ROM access attempts

Answer

Disables AutoRun for CD-ROM drives

Question 5

Which Windows Server 2003 built-in group has the ability to manage security policy settings without being a member of Administrators?

Accepted Answer

Server Operators

Answer

Account Operators

Answer

Backup Operators

Answer

Power Users

Question 6

What is the purpose of enabling 'Do not store LAN Manager hash value on next password change' in Windows Server 2003?

Accepted Answer

Prevents the weak LM hash from being stored in the SAM database

Answer

Forces all users to change passwords at next logon

Answer

Disables NTLM authentication entirely

Answer

Encrypts the SAM database with AES