Font size
WorksheetsMOC 20744C-Securing Windows Server 2016 - Part 1
Total questions: 20
Worksheet time: 12mins
Select 2 Attack against application from the following. Select 2 options
SQL injection
Adware
Distributed operating system
Distributed denial of service
Spyware
What are the key target resources for attackers? Select 3 options from the following.
Domain Controller
Database servers
Email servers
DNS servers
DHCP servers
One of the tools used to determine which applications are configured to start automatically when a computer boots up or user sign on. Select from the following.
Accesschk
Sysmon
Autorun
LogonSession
Select 2 statements for principles of least privilege from the knowledge you gain from this course.
Use a single over privileged account.
Only use privileged accounts to perform administrative tasks
Use administrator account to perform administrative task
Avoid single over privileged account.
Select 2 statements for principles of least privilege from the knowledge you gain from this course.
Use a single over privileged account.
Only use privileged accounts to perform administrative tasks
Use administrator account to perform administrative task
Avoid single over privileged account.
GMSA must require this following key. Select one option
Public key
Private key
KDS root key
PAM process is implemented through temporary group membership
True
False
________________________________Protects the password of the domain by storing them in a virtual container instead of storing in RAM.
Protected user group
Windows defender credential guard
Group managed service account
Microsoft managed service account
What are the 2 important files in Just Enough Administration?
Role capability file
Visible function file
Session configuration file
Visible cmdlet file
Helps a computer resist attacks and infection from malware, only software or firmware signed with approved keys are allowed to execute.
Dual boot
Secure boot
Antivirus
What scanning options are available when you use Windows Defender?
Quick
Full
Custom
All of the Above
Other than the host server operating system, which two Microsoft products do you need to deploy before you deploy MIM 2016?
MSoffice 2016
SharePoint
SQL Server
Exchange server 2016
IP sec is predominantly used in VPN’s
True
False
What is shadow account?
A new account created without using the production source credentials.
An existing user account from a privileged domain
A copy of the account created in privileged domain, also exist in the production domain.
AppLocker uses _________________________service to verify a file attribute. App policies are not enforced if the service is not running.
Azure identity
Application Identity
MIM
What is the tool available in SCT to view and compare your local policy and local registry?
Shielded VM
Host guardian Services
Policy Analyzer
GPO editor
What are the 2 types of containers supported in windows server Virtualisation Security?
Organisation Unit
Container
Hyper-V container
Silos
Windows server container
What are the 2 modes in a container where the codes can run?
User mode
Kernel mode
Computer mode
Virtual mode
What are the options available to encrypt Files in Windows server 2016? Choose Two.
EFS
DFS
FRS
Bitlocker
Bitlocker provides a recovery mechanism with a _______digit recovery key
57
42
48
32
