Active Directory with Windows Server 2016 - Configuring Account Security

The video tutorial explains how to configure various security policies in Windows 2016, including password policies, account lockout policies, and Kerberos policies. It covers the steps to set password policies using the Group Policy Management Editor, discusses the importance of setting policies at the domain level, and explains the differences between local and domain policies. The tutorial also details how to configure account lockout settings to prevent unauthorized access and provides an overview of Kerberos policies, emphasizing the importance of using Kerberos over NTLM for better security.

Which tool is used to set password policies in Windows 2016?

• Event Viewer

• Group Policy Management Editor

• Task Manager

• Device Manager

What is the default number of passwords remembered in the password history?

• 42

• 24

• 7

• 10

What is the recommended minimum password length?

• 7 characters

• 20 characters

• 5 characters

• 10 characters

Why should reversible encryption for passwords generally be disabled?

• It makes passwords easier to decipher

• It makes passwords easier to remember

• It increases the complexity of passwords

• It is required for all applications

What is the purpose of the account lockout policy?

• To allow unlimited login attempts

• To prevent password reuse

• To prevent unauthorized access through password guessing

• To enforce password complexity

What is the default account lockout duration?

• 10 minutes

• 30 minutes

• 60 minutes

• 0 minutes

What is Kerberos primarily used for?

• Data backup

• Network monitoring

• User authentication

• File encryption

What is a ticket granting ticket in Kerberos?

• A network access key

• A user authentication token

• A password reset tool

• A data encryption method

What is the default maximum tolerance for clock synchronization in Kerberos?

• 15 minutes

• 1 minute

• 10 minutes

• 5 minutes

Why is it important to enforce user logon restrictions in Kerberos?

• To improve system performance

• To validate session tickets against user rights

• To allow multiple logins

• To disable password complexity