Lesson 5: Protecting the Server and Client

Role separation improves server security by:

•  Enforcing principle of least privilege.
• Installing applications on separate hard disks.
• Physically separating high security servers from other servers.
• Placing servers on separate VLANs.

You need to install a domain controller in a branch office. You also need to secure the
information on the domain controller. You will be unable to physically secure the server. Which should you implement?

• Read-Only Domain Controller
• Point-to-Point Tunneling Protocol (PPTP)
• Layer 2 Tunneling Protocol (L2TP)
• Server Core Domain Controller

What are two attributes that an email message may contain that should cause a user to question whether the message is a phishing attempt?

• An image contained in the message + spelling and grammar errors
• Threats of losing service + Use of bold and italics
• Spelling and grammar errors + Threats of losing service
•  Use of bold and italics + An image contained in the message

Cookies impact security by enabling:

• Storage of Web site passwords. + Web sites to track browsing habits.
• Higher security Web site protections. + Secure Sockets Layer (SSL).

A user who receives a large number of emails selling prescription medicine is probably receiving pharming mail.

• Malware
• Spoofed mail
• Spam
• No Change is Needed

You want to make your computer resistant to online hackers and malicious software. What should you do?

• Configure a forward proxy
• Install anti-virus software
• Enable spam filtering
• Turn on Windows Firewall

Keeping a server updated:

• Maximizes network efficiency
• Fixes security holes
• Speeds up folder access
• Synchronizes the server

Phishing is an attempt to:

• Obtain information by posing as a trustworthy entity.
•  Limit access to e-mail systems by authorized users.
• Steal data through the use of network intrusion.
• Corrupt e-mail databases through the use of viruses.

What is an example of non-propagating malicious code?

• A back door
• A hoax
• A Trojan horse
• A worm

Windows Server Update Services (WSUS) is a tool that:

• Updates data stored in Windows servers
• Manages the services that run on a server
• Updates licensing for Windows servers
• Manages updates for Microsoft software