Network Security Domain 2 Practice

Practicing separation of services reduces the ___________ on each server.

Which steps are steps that user can take to harden devices, including servers? Choose 3.

• Configure remote access

• Disable unnecessary accounts

• Remove administrative accounts

• Enable built-in accounts

• Transfer servers to a separate subnet

Refer to the image. A server has been set up to store a domain controller, as well as several other features. To best practice separation of services, which of the following features should the user transfer to a separate server?

• DNS

• File and Storage Services

• IIS

• AD DS

• DHCP

Answer explanation

It is considered a best practice to run IIS (Internet Information Services) on a separate server from the domain controller because doing so significantly improves security by isolating the web server from the critical authentication and directory services managed by the domain controller; if a malicious actor compromises the web server, they won't have direct access to sensitive Active Directory data, minimizing potential damage to your network

Part of patch management entails making sure either a device of an app always has the the latest patches, which usually involve ________________.

• new features

• security updates

• password updates

Users can view and download patches by navigating to which Windows feature?

• Windows Backup

• Windows Update

• Windows Troubleshoot

• Delivery Optimization MS

• Windows Security

Which command is used to make a device update to any Group Policies that apply to that data?

• gpforce/update

• gpupdate/force

• gpupdate/device

• gpcommand/update

Refer to the image. The results show that a local Group Policy has not been applied to the device. Which command did the user input to receive the results.

• gpresult/R

• gpupdate/results

• gpupdate/force

• gpupdate/user

• gpupdate/F

Which is one way to get server updates?

• WSUS

• RODC

• NECC

• WCCS

Answer explanation

Windows Server Update Services (WSUS) enables information technology administrators to deploy the latest Microsoft product updates. You can use WSUS to fully manage the distribution of updates that are released through Microsoft Update to computers on your network

Which dynamic update setting, when enabled, ensures that each and every update must be installed manually?

• Nonsecure only

• Secure only

• None

• Nonesecure and secure

Answer explanation

The NONE dynamic update setting, when enabled, means that every single update must be installed manually. This is typically considered an arduous and time-consuming process.

Which protocols are considered insecure due to lack of encryption? (Choose 3)

• PAP

• Telnet

• SFTP

• FTP with passwords

• HTTPS