Networking 3/4 Chapter 13 Test Review

You are a contractor that has agreed to implement a new remote access solution based on a Windows Server 2016 system for a client. The customer wants to purchase and install a smart card system to provide a high level of security to the implementation. Which of the following authentication protocols are you MOST likely to recommend to the client?

• PPP

• MS-CHAP

• CHAP

• EAP

You are configuring the Local Security Policy on a Windows system. You want to require users to create passwords that are at least 10 characters in length. You also want to prevent login after three unsuccessful login attempts. Which policies should you configure? (Select two.)

• Enforce password history

• Account lockout threshold

• Minimum password length

• Password must meet complexity requirements

• Maximum password age

You have hired 10 new temporary employees to be with the company for three months. How can you make sure that these users can only log on during regular business hours?

• Configure account lockout in Group Policy.

• Configure day/time restrictions in user accounts.

• Configure account policies in Group Policy.

• Configure account expiration in user accounts.

A network switch is configured to perform the following validation checks on its ports:

-All ARP requests and responses are intercepted.

-Each intercepted request is verified to ensure that it has a valid IP-to-MAC address binding.

-If the packet has a valid binding, the switch forwards the packet to the appropriate destination.'- If the packet has an invalid binding, the switch drops the ARP packet.

Which security feature was enabled on the switch to accomplish this task?

• Dynamic ARP inspection

• IGMP snooping

• DHCP snooping

• Port security

What is WindowsUpdate.log?

• A log file that deploys updates to device groups over a deployment timeline.

• A log or record of all notable changes made to a Windows system.

• A log file that analyzes Windows Update Service, BITS, and Windows Network Diagnostics Service.

• A log file that allows you to see enforced policies on your Windows 10 machine.

Which of the following actions typically involve the use of 802.1x authentication? (Select two.)

• Authenticating remote access clients.

• Controlling access through a router.

• Controlling access through a wireless access point.

• Controlling access through a switch.

• Authenticating VPN users through the internet.

You are in the process of implementing a Network Access Protection (NAP) infrastructure to increase your network's security. You are currently configuring the remediation network that non-compliant clients will connect to in order to become compliant. The remediation network needs to be isolated from the secure network. Which technology should you implement to accomplish this task?

• Port security

• Virtual private network (VPN)

• Data encryption using PKI

• Network segmentation

Your Windows system is a member of a domain. Windows Update settings are being controlled through Group Policy. How can you determine whether a specific security update from Windows Update is installed on the computer?

• Check the Local Security Policy.

• Go to Programs and Features in Control Panel.

• Run the netsh winhttp import proxy source command.

• Run the netsh winhttp import proxy source command.

Match the Network Access Protection (NAP) component on the left with its description on the right.

• Enforcement server (ES)

• Is clients' connection point to the network.

• NAP client

• Generates a Statement of Health (SoH) that reports the client configuration for health requirements.

• Remediation server

• Runs the System Health Validator (SHV) program.

• NAP server

• Contains resources accessible to non-compliant computers on a limited-access network.

You have a company network with a single switch. All devices connect to the network through the switch. You want to control which devices will be able to connect to your network. For devices that do not have the latest operating system patches, you want to prevent access except to a special server that holds the patches the computers need to download. Which of the following components should be part of your solution? (Select two.)

• Honeypot

• Remediation servers

• Extranet

• 802.1x authentication

• Screened subnet