Mod 17 Securing and Sharing Windows Resources

While researching a network issue, Randy discovered a diagram that he can use to see the design of the network. What type of documentation did Randy discover?

• Network topology

• Inventory management

• Knowledge base

• Architectural drawing

Answer explanation

Randy discovered a network topology diagram, which visually represents the design and layout of the network. This type of documentation is essential for understanding how different components are interconnected.

One of your clients at work calls and is irate because they had to change their password and now, they can't seem to find one that will match the strength needed for the company server. After they finish venting, you tell them you will send them the document that explains why they need to have a strong password. What document will you send the client?

• Acceptable use policy

• Regulatory and compliance policy

• Knowledge base

• Password policy

Answer explanation

The correct document to send is the Password policy, as it specifically outlines the requirements for creating strong passwords, addressing the client's concerns directly.

Holly has been tasked to design the plan that the IT department will use when making a change to systems. The plan will be used anytime the company needs to change a system and should include which people are to be contacted when changes are made and what the changes will do to other equipment. While Holly writes the change document, what types of things will she need to include in the scope of change?

• Key components of the change and how they will be addressed

• Skill sets, tasks, and activities required to carry out the change

• How the success of the change will be measured

• Who will participate in the change

• Risk or problems that might arise during the change

Answer explanation

Holly's change document should include key components of the change, required skill sets, success measurement, and participant roles to ensure a comprehensive plan for system modifications.

Becky has been assigned to help with a major change to her company's accounts database. During the time of the change, Becky notices that her task will need to be modified to complete the change. Instead of telling her supervisor, she determines that one minor detail must have been overlooked and fixes what she believes is the problem. The minor detail that Becky did not tell her supervisor caused the change to fail. What is Becky's mistake called?

• Scope of change

• Out of scope modification

• Change modification

• Request for comments

Answer explanation

Becky's mistake is called an 'Out of scope modification' because she made changes without consulting her supervisor, leading to a failure in the change process due to an overlooked detail.

Roger's company is trying to increase the level of security for its network. Roger is researching ways to increase the security by making passwords more complex. Which option can Roger change in Windows to require more complex passwords?

• Group Policy

• Organizational unit

• Password Policy

• Access control List

Answer explanation

Roger can change the Password Policy in Windows to enforce more complex passwords. This policy allows the configuration of password length, complexity requirements, and expiration, enhancing overall network security.

Jennifer's company currently uses Windows Active Directory to provide centralized authentication, authorization, and accounting to manage users on its network. The company uses a wireless network and an earlier authentication service on the server to authenticate end users accessing resources on the network.

• TKIP

• WPA2

• WEP

• RADIUS

Answer explanation

RADIUS is the correct choice as it provides centralized authentication for users accessing the network, which aligns with the company's use of Windows Active Directory for managing user access.

Currently James's company is using RADIUS for AAA services to connect wireless users to the Windows Active Directory domain. However, the company wants to upgrade to a Cisco-based wireless network and would like to upgrade the older RADIUS. What protocol should the company consider upgrading to?

• TACACS+

• LDAP

• Kerberos

• EAP

Answer explanation

TACACS+ is a Cisco protocol that provides enhanced security and control over AAA services compared to RADIUS. It is suitable for managing access to network devices, making it a better choice for upgrading the existing RADIUS setup.

Which option would James recommend as an upgrade to RADIUS?

• AES

• WPA2

• RADIUS+

• TACACS+

Answer explanation

TACACS+ is recommended as an upgrade to RADIUS because it offers enhanced security features, including better encryption and more granular control over user access, making it a superior choice for authentication.

Allison's computer is displaying a strange error message saying that Allison, who is an administrator, does not have access to a folder in the Documents library on her user account. Allison tried to take ownership of the folder but was still denied access. She tried running an antivirus scan on the folder, and again access to the folder was denied.

• Restart the computer and try to gain access after the restart.

• Copy the folder to a flash drive and run a scan on the flash drive.

• Boot into Safe Mode and run the scan.

• Run a Windows Defender Offline scan.

Answer explanation

Running a Windows Defender Offline scan is the best option as it allows the antivirus to check for malware before the operating system fully loads, potentially resolving access issues caused by malware.

Zach believes someone is trying to log in to a computer system in order to gain access to the company's network. He wants to use Windows to determine if that is the case. Where can Zach go to check the security logs?

• NTblog.txt

• Event Viewer

• Antivirus security logs

• Action Center

Answer explanation

Zach should check the Event Viewer, as it logs security events, including login attempts. This tool provides detailed information about system events, making it the best choice for monitoring unauthorized access.