Active Directory and Security Concepts Quiz

What is the primary purpose of Active Directory in an enterprise environment?

• Managing network hardware configurations

• Centralized authentication and authorization

• Providing cloud storage for users

• Enforcing encryption on all network traffic

Which of the following is NOT a valid method to create user accounts in Active Directory?

• Using Active Directory Users and Computers (ADUC)

• Using PowerShell commands

• Using Group Policy Management Console (GPMC)

• Using Command Prompt with dsadd

What is the key benefit of implementing Role-Based Access Control (RBAC)?

• Users can change their own access permissions

• Access is granted based on user roles rather than individuals

• All users have administrator privileges by default

• It removes the need for authentication

Which of the following is not a common use of Group Policy Objects (GPO)?

• Enforcing password complexity rules

• Blocking access to certain applications

• Managing firewall settings

• Installing software without user permission

What is the main goal of an LLMNR poisoning attack?

• To inject malware into a system

• To redirect network traffic and steal credentials

• To bypass Active Directory authentication

• To disable network firewalls

Which of the following is the best way to mitigate LLMNR poisoning attacks?

• Disabling LLMNR and NBT-NS protocols

• Increasing network bandwidth

• Enabling guest accounts on all machines

• Allowing unrestricted outbound traffic

What does a Kerberoasting attack exploit?

• Weak encryption in SSL/TLS

• Vulnerable service accounts with SPNs (Service Principal Names)

• Misconfigured firewall settings

• Outdated operating system patches

Which security measure can help mitigate the risk of a Kerberoasting attack?

• Using weak passwords for service accounts

• Granting Domain Admin rights to all users

• Enforcing strong password policies for service accounts

• Disabling user authentication on the domain controller

What is the primary purpose of AppArmor in Linux?

• To encrypt files using AES encryption

• To prevent unauthorized processes from accessing resources

• To manage user accounts in a Linux environment

• To speed up system boot time

Which AppArmor profile mode enforces restrictions but does not block execution?

• Complain mode

• Enforce mode

• Audit mode

• Restrict mode