Sec Plus 1

You have hired 10 new temporary workers who will be with the company for three months. You want to make sure that the user accounts cannot be used for login after that time period. What should you do?

• Configure account lockout in Group Policy.

• Configure account policies in Group Policy.

• Configure day/time restrictions in the user accounts.

• Configure account expiration in the user accounts.

Which type of update should be prioritized even outside of a normal patching window?

• 
  

  Monthly updates

• Critical updates

• Microsoft updates

• Security updates

Prepare to Document means establishing the process you will use to document your network.

Which of the following makes this documentation more useful?

• Automate administration as much as possible.

• Have a printed hard copy kept in a secure location.

• Identify the choke points on the network.

• Identify who is responsible for each device.

Documenting procedures and processes are part of which milestone in the NSA's Manageable Network Plan?

• Prepare to Document

• Control Your Network

• Document Your Network

• Reach Your Network

In which milestone should you use a network scanner and then confirm the scan manually with a room-by-room walkthrough?

• Protect Your Network

• Map Your Network

• Prepare to Document

• Reach Your Network

Windows Server Update Services (WSUS) is used to accomplish which part of a manageable network?

• Documentation

• Patch management

• 
  

  Device accessibility

• User access

You have recently been hired as the new network administrator for a startup company. The company's network was implemented prior to your arrival. One of the first tasks you need to complete in your new position is to develop a manageable network plan for the network.

You have already completed the first and second milestones, in which documentation procedures were identified and the network was mapped. You are now working on the third milestone, which is identifying ways to protect the network.

Which tasks should you complete as a part of this milestone? (Select two.)

• Identify and document each user on the network.

• Set account expiration dates.

• Apply critical patches whenever they are released.

• Create an approved application list for each network device.

• Physically secure high-value systems.

For Milestone 4 (Reach Your Network), which of the following would be considered a secure protocol to use to reach your network?

• Telnet

• FTP

• 
  

  SSH

• HTTP

As you go through the process of making your network more manageable, you discover that employees in the sales department are on the same network segment as the human resources department.

Which of the following steps can be used to isolate these departments?

• Implement the principle of least privilege for the human resources department.

• 
  

  Move the sales department into the DMZ.

• Identify the choke points on your network.

• Create a separate VLAN for each department.

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.)

• Security Configuration and Analysis

• WSUS

• Group Policy

• Security Templates