SH - Chapter 1

Match the following:

• Minimize Attack Surface

• Reduce the number of vulnerable entry points in the network.

• Least privilege

• Provide multiple layers of protection

• Defense-in -Depth

• Grant users with only the privileges to allow them to perform required tasks.

Match the security measure with the respective layer.

• Host

• Implement Network Segments

• Perimeter

• Install Firewall

• Data

• Encryption

• Network

• Install security updates and use secure authentication protocol

Match the following port numbers to its associated services/applications.

• 80

• SMTP

• 443

• RDP

• 22

• HTTP

• 3389

• SSH

• 25

• HTTPS

Match the following description to the Windows Security Feature.

• Applocker

• Filter traffic.

• User Access Control

• Control which application can be executed.

• Firewall

• Prevent unauthorized changes to OS by first asking for user's approval.

• Secure desktop

• Prevent malware from automating a response a credential prompt.

Which one of the following is NOT the reason for installing a Windows Server in Server Core mode?

• Reduce Maintenance.

• Reduce Surface of Attack.

• Minimize the amount of disk space required.

• Reduce the cost of purchasing Windows Server OS.

Match the following terms.

• Prove an identity through login

• Authentication

• Tracks and audit access and capabilities

• Accounting

• Grant access to resources based on user

• Authorisation

Which one of the following tools can be used to configure security settings of a computer with a predefined set of security settings?

• Applocker

• Microsoft Baseline Security Analyser

• Windows Firewall

• Security Templates

Which of the following will NOT help to harden a server?

• Apply the latest service pack and security updates

• Restrict physical and network access to server

• Install servers in Server Core mode

• Disable Automatic Updates

Which of the following is the default rule for Windows firewall?

• Enabled. Block all incoming, allow all outgoing traffic.

• Disabled. Block all incoming, allow all outgoing traffic.

• Enabled. Block all outgoing, allow all incoming traffic.

• Disabled. Block all outgoing, allow all incoming traffic.

Which of the following is NOT used to define a firewall rule?

• IP addresses

• Port number 

• ACL

• Protocol number