You have hired 10 new temporary workers who will be with the company for three months. You want to make sure that the user accounts cannot be used for login after that time period. What should you do?

• Configure account lockout in Group Policy.

• Configure account policies in Group Policy.

• Configure account expiration in the user accounts.

• Configure day/time restrictions in the user accounts.

Which Microsoft tool can be used to review a system's security configuration against recommended settings?

• Microsoft Security Compliance Toolkit

• Registry Editor

• Microsoft Internet Explorer

• Windows Defender

Which type of update should be prioritized even outside of a normal patching window?

• Microsoft updates

• Security updates

• Critical updates

• Monthly updates

Which of the following makes this documentation more useful? (select 3)

• Have a printed hard copy kept in a secure location.

• Identify the choke points on the network.

• Automate administration as much as possible.

• Identify who is responsible for each device.

Which of the following tools can you use on a Windows network to automatically distribute and install software and operating system patches on workstations? (Select two.)

• WSUS

• Security Templates

• Group Policy

• Security Configuration and Analysis

Which of the following describes a configuration baseline?

• A list of common security settings that a group or all devices share

• A collection of security settings that can be automatically applied to a device

• A set of performance statistics that identifies normal operating performance

• The minimum services required for a server to function

By definition, what is the process of reducing security exposure and tightening security controls?

• Hardening

• Passive reconnaissance

• Social engineering

• Active scanning

Which of the following is the strongest form of multi-factor authentication?

• A password, a biometric scan, and a token device

• Two-factor authentication

• A password and a biometric scan

• Two passwords

You have placed a File Transfer Protocol (FTP) server in your DMZ behind your firewall. The FTP server is to be used to distribute software updates and demonstration versions of your products. However, users report that they are unable to access the FTP server. What should you do to enable access?

• Move the FTP outside of the firewall.

• Install a VPN.

• Open ports 20 and 21 for outbound connections.

• Define user accounts for all external visitors.

FTPS uses which mechanism to provide security for authentication and data transfer?

• Multi-factor authentication

• SSL

• IPsec

• Token devices