MCSE MSCE Security Protocols & Compliance Standards 2

Question 1

An organization must ensure data transmitted between branch offices is encrypted and authenticated. Which protocol provides both confidentiality and data integrity for site-to-site VPN tunnels?

Accepted Answer

IPsec with ESP in tunnel mode

Answer

PPTP with MPPE

Answer

L2TP without IPsec

Answer

GRE tunneling

Question 2

A company's compliance team requires audit logs to be tamper-evident and retained for seven years. Which Windows Server feature best satisfies this requirement?

Accepted Answer

Azure Monitor with Log Analytics workspace retention policy

Answer

Windows Event Forwarding to a shared folder

Answer

Local Security Policy audit settings only

Answer

Task Scheduler log rotation scripts

Question 3

Which EAP method uses certificates on both the server and client, providing mutual authentication without needing a password?

Accepted Answer

EAP-TLS

Answer

EAP-MD5

Answer

PEAP-MSCHAPv2

Answer

LEAP

Question 4

Under PCI DSS, which control requires that cardholder data environments use multi-factor authentication for all non-console administrative access?

Accepted Answer

Requirement 8

Answer

Requirement 2

Answer

Requirement 7

Answer

Requirement 11

Question 5

A security architect needs to prevent internal hosts from initiating connections to known malicious IP addresses. Which Windows Server feature applies this control at the network layer without a third-party firewall?

Accepted Answer

Windows Defender Firewall outbound rules

Answer

AppLocker

Answer

BitLocker Network Unlock

Answer

Credential Guard

Question 6

Which FIPS 140-2 validation level requires that cryptographic modules show evidence of tamper by using tamper-evident coatings or seals on physical hardware?

Accepted Answer

Level 2

Answer

Level 1

Answer

Level 3

Answer

Level 4

Question 7

An administrator configures a Group Policy to enforce TLS 1.2 as the minimum protocol version on all Windows servers. Which registry path controls the Schannel TLS protocol settings?

Accepted Answer

HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

Answer

HKLM\SOFTWARE\Policies\Microsoft\Cryptography

Answer

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Answer

HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters