Session 7-Chapter 5

What is the main purpose of Dynamic Access Control (DAC) in Windows Server?

• To encrypt the network traffic between clients and servers

• To secure and control access to resources based on claims
  

• To configure domain controllers for user authentication
  

• To monitor user activity across the network

In a claims-based access control system, what does a claim represent?

• A piece of information that defines the user's identity or attributes

• A policy for user access to applications

• A password used to authenticate the user

• A network resource that the user wants to access

Which of the following is required to implement Dynamic Access Control (DAC) in a network?

• A Windows Server 2008 domain controller

• A specialized access control list on each resource

• A third-party authentication service

• A trusted identity provider and Windows Server 2012 or higher

What is stored in the Kerberos ticket used for claims authorization in Windows Server 2012 R2/2016?

• The user’s SID, group membership, and claims

• A password hash and encryption key

• The user’s role-based access control policies

• The resource access logs of the user

Which component in Windows Server 2012 R2/2016 serves as the identity provider for claims-based access control?

• Kerberos Key Distribution Center (KDC)

• Active Directory Domain Services (AD DS)

• Security Token Service (STS)

• File Server Resource Manager (FSRM)

In a claims-based access control system, what role does the Security Token Service (STS) play?

• It creates and stores the claims for users or devices

• It verifies the authenticity of the claims and issues the token

• It provides the Kerberos authentication tickets for users

• It manages the file permissions on the server

What is the primary function of Windows Rights Management (RMS) and Azure Rights Management?

• To encrypt documents for storage

• To provide a Virtual Private Network (VPN) for secure document sharing

• To restrict who can access a document and control what actions can be performed on it

• To create backups of confidential documents

Which of the following actions can be controlled using Windows RMS?

• Who can access a document and what can be done with the document (e.g., print, copy, edit, delete)

• The document's file size

• The document's font and style

• The document's storage location

Which policy should be considered when using Windows RMS to protect documents on personal devices?

• Firewall policy

• Backup policy

• Network bandwidth policy

• Bring Your Own Device (BYOD) policy

In a company that uses Office 365, which of the following would be an appropriate action for protecting sensitive documents with Azure Rights Management?

• Allow any user within the organization to forward the document to external parties

• Encrypt the document so that only authorized users can read it, and prevent unauthorized editing, copying, or forwarding

• Delete the document after it has been read by a user

• Store the document in a local drive