MCSE 70-299: Implementing Network Security

Question 1

Which command is used to apply a security template to a Windows Server 2003 system from the command line?

Accepted Answer

secedit /configure /db temp.sdb /cfg hisecws.inf

Answer

The secedit command with the /configure switch applies a security template (.inf file) to the local system using a specified security database.

Question 2

What is the effect of setting the LAN Manager Authentication Level to 'Send NTLMv2 response only. Refuse LM & NTLM'?

Accepted Answer

Forces all authentication to use NTLMv2, blocking weaker LM and NTLM protocols

Answer

This setting maximizes NTLM security by refusing the weaker LM and NTLMv1 authentication protocols, requiring all clients to use NTLMv2.

Question 3

Which tool can be used to test IPSec policy on a Windows Server 2003 computer and see active security associations?

Accepted Answer

ipseccmd show sas

Answer

The ipseccmd show sas command displays active IPSec security associations, allowing administrators to verify that IPSec is negotiating correctly.

Question 4

What does enabling 'Restrict CD-ROM access to locally logged-on user only' accomplish in Windows Server 2003?

Accepted Answer

Prevents network users from accessing the local CD-ROM drive

Answer

This security setting ensures that only the user physically logged on at the console can access the CD-ROM, preventing remote users from reading sensitive media.

Question 5

Which Windows Server 2003 built-in group has the ability to manage security policy settings without being a member of Administrators?

Accepted Answer

Server Operators

Answer

Server Operators can perform tasks like managing shared resources, starting and stopping services, and backing up/restoring files on domain controllers.

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE - Microsoft Certified Systems Engineer Practice Test

MCSE 70-299: Implementing Network Security