MCSE 70-298: Designing Network Security

Question 1

Which security template in Windows Server 2003 provides the highest level of security but may break legacy application compatibility?

Accepted Answer

hisecws.inf

Answer

The hisecws.inf (High Security Workstation) template enforces strict security settings that may prevent older applications from running correctly.

Question 2

What is the purpose of a DMZ (Demilitarized Zone) in network security design?

Accepted Answer

Isolates publicly accessible servers from the internal private network

Answer

A DMZ is a network segment that separates public-facing servers (web, mail, FTP) from the internal corporate network, limiting exposure if a DMZ server is compromised.

Question 3

Which feature of Windows Server 2003 IPSec allows you to require encryption for all traffic between two specific servers?

Accepted Answer

IPSec policy with Require Security rule

Answer

An IPSec policy configured with a 'Require Security' action mandates that all communications matching the filter rule use encrypted, authenticated IPSec connections.

Question 4

What is the minimum Kerberos ticket lifetime that Microsoft recommends to prevent replay attacks?

Accepted Answer

5 minutes

Answer

The default and recommended Kerberos ticket lifetime is 10 hours for TGTs, but the clock skew tolerance (which prevents replay attacks) defaults to 5 minutes.

Question 5

Which tool is used to analyze the current security configuration of a Windows Server 2003 system against a security template?

Accepted Answer

Security Configuration and Analysis

Answer

The Security Configuration and Analysis snap-in compares the current system security settings against a security template and highlights discrepancies.

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE 70-298: Designing Network Security