Windows XP Pro Risk Assessment & Management 5

Question 1

A Windows XP Pro machine is found to have Remote Registry service enabled. What specific risk does this introduce?

Accepted Answer

Remote attackers can read or modify the registry over the network

Answer

The Remote Registry service allows authorized (and potentially unauthorized) users to connect to and manipulate registry keys remotely, enabling configuration tampering or information gathering.

Question 2

Which Windows XP Pro policy setting reduces the risk of an attacker using cached domain credentials on a stolen laptop?

Accepted Answer

Set 'Interactive logon: Number of previous logons to cache' to 0

Answer

Setting cached logons to 0 prevents Windows XP from storing domain credential hashes locally, so a stolen laptop cannot be used to authenticate as a domain user offline.

Question 3

During a Windows XP Pro risk assessment, you discover the local Administrator account has a blank password. What NTLM behavior does Windows XP apply in this case?

Accepted Answer

It restricts blank-password accounts to console logon only by default

Answer

By default, Windows XP restricts accounts with blank passwords to local console logon only, blocking network authentication to reduce the risk of remote exploitation.

Question 4

A risk management plan identifies that the cost of a control exceeds the potential loss it prevents. What is the CORRECT decision?

Accepted Answer

Accept the risk and skip the control

Answer

When control cost exceeds potential loss, the economically rational decision is to accept the risk, since spending more than the expected loss is not cost-effective.

Question 5

Which Windows XP Pro feature should be evaluated during a risk assessment to ensure data confidentiality when files are sent to a shared network printer?

Accepted Answer

IPSec policy for the network segment

Answer

IPSec can encrypt traffic between the Windows XP Pro workstation and the print server, preventing eavesdropping on print data crossing the network.

Windows XP Pro Practice Test

Windows XP Pro Practice Test

Windows XP Pro Risk Assessment & Management 5