Which of the following are ways to prove your identity for access to computer systems?

What you have, What you know, What you are

Discretionary Access Control (DAC) can be best described by which of the following?

Can either be rule or role based, Relies on Custodian to set the right security

Which of the following administrative templates Can be applied to users and computers?

Network, System, Windows Components

Mandatory Access Control (MAC) can be best described as which of the following?

Significate overhead, Uses labels and levels, Difficult to manage

Which default Group Policy Objects are linked to the domain container OU?

Default Domain Controllers Policy

What are the levels of domains?

Lower Level, Secondary Level, Top Level

Which of the following administrative templates can only be assigned to users?

Start Menu/Taskbar, Control Panel, Desktop, Shared Folders

studbud

Server 105-107

98 termsStudBud Administration102 plays

Imported from external platform

Flashcards98 cardsFPractice quizPHost liveL

Questions 98

Answers

1
When using Kerberos, the host server can authorize access to services without a service ticket
True
False
2
What are client applications that computers use to connect to a web server and access resources stored on it?
Web Structure
Web Container
Web Server
Web Storage
3
What is a user or process functioning on behalf of the user that attempts to access an object?
User
Object
Subject
Operation
4
What is a collection of domains?
DNS ocean
DNS range
DNS forest
DNS jungle
5
What sends unresolved queries to the next-highest DNS server?
Secondary Level
Forwarders
Pointers
Repeater
6
Registration Authority (RA) is subordinate to the CA
False
True
7
At each level, there can only be one GPO
False
True
8
'What you have' can take the form of which of the following?
Token
CAC
Fingerprint
Password
9
Which of the following are ways to prove your identity for access to computer systems?
What you have
What you know
Who you know
What you are
10
'What you know' can be which of the following?
Password
CAC
PIN
Fingerprint
11
Which step of a GPO load order is as follows: Client Computer queries domain controller for GPOs?
4
3
1
2
12
What part of the process of Access Control is when credentials are validated as genuine?
Authentication
Access
Authorization
Identification
13
What is required for a member server to be promoted to a Domain Controller (DC)?
FTP
DNS
HTTP
DHCP
14
Which setting subcategory manages software instillation and maintenance?
Hardware Settings
Administrative Templates
Software Settings
Windows Settings
15
Which windows setting is done through scripts?
Security Policy
Folder Redirection
Task Manager
Task Automation
16
What is the action that is taken by the subject over the object?
Operation
User
Subject
Object
17
What is a record created for reverse lookup zones?
Reverser
Pointers
Lookout
Adapter
18
What part of the process of Access Control is when a level of permission is granted?
Access
Identification
Authorization
Authentication
19
What type of certificate verify that software published has not been tampered with?
Class 3
Class 2
Class 4
Class 1
20
Some CA's use an embedded key recovery system called a Key Recovery Agent (KRA)
False
True
21
Which step of a GPO load order is as follows: Domain controller presents list of GPOs to the Client Computer?
3
1
4
2
22
Conflict resolution is used to resolve improper use of No Override or Block Policy settings
True
False
23
Discretionary Access Control (DAC) can be best described by which of the following?
Can either be rule or role based
Relies on Custodian to set the right security
No overhead
Most restrictive model
24
By default, GPO settings are inherited from higher OU's
True
False
25
What is used to limit user manipulation of user desktop and computer configurations?
User Management
Administrative Templates
System Settings
Client Security Policies
26
Which phase of software rollout is when an installed application is removed by either the user or server?
Software Preparation
Software Maintenance
Software Deployment
Software Removal
27
Which of the following administrative templates Can be applied to users and computers?
Printers
Network
System
Windows Components
28
What is a hierarchical collection of domains and has a contiguous DNS naming structure?
Leaves
Tree
Branch
Forest
29
Which of the following logical roles is Access Control based on?
Objects
Users
Subjects
Operations
30
Mandatory Access Control (MAC) can be best described as which of the following?
Lest restrictive model
Significate overhead
Uses labels and levels
Difficult to manage
31
Which step of a GPO load order is as follows: Domain controller finds applicable GPOs?
3
1
2
4
32
When can scripts to change user configurations be run?
Startup
Logon
Shutdown
Logoff
33
What centralizes management of user and computer configuration settings?
Group Policy Objects
Object Folders
Application Management
File Structure
34
When certificates are no longer in use, where are they managed?
Certificate Removed List
Certificate Kill List
Certificate Revocation List
Certificate Revoked List
35
Public and Private keys must be created by __, and verified by __
Root CA, Subordinate CA
RA, CA
Root CA, RA
CA, RA
36
Which default Group Policy Objects are linked to the domain container?
Default Domain Controllers Policy
Default Gomain Policy
37
Conflicts between GPO's are resolved according to highest to lowest
False
True
38
What is a logical container for User/Computer Objects?
Group Unit
Logical Unit
GPO Unit
Organizational Unit
39
Which phase of software rollout is updating or forwarding patches as needed to client applications?
Software Preparation
Software Deployment
Software Maintenance
Software Removal
40
No Override is used to enforce GPO Policies despite conflicts from lower-level policies
False
True
41
Employing DAC is done through the use of DAC Lists (DACL)
True
False
42
What type of certificate enables clients connecting to the Web server to examine the identity of the servers owner?
Class 2
Class 4
Class 1
Class 3
43
The validity period of a certificate can change due to suspension or revocation or the cert
True
False
44
Which default Group Policy Objects are linked to the domain container OU?
Default Gomain Policy
Default Domain Controllers Policy
45
What are the levels of domains?
Lower Level
Bottom Level
Secondary Level
Top Level
46
M-of-N control allows for the reconstruction of a key as long as 100% of the other users agree?
False
True
47
X-509 PKI is not the most common format for digital certificates
False
True
48
What type of certificate typically only requires a user's name and e-mail address?
Class 1
Class 4
Class 2
Class 3
49
Which of the following administrative templates can only be assigned to users?
Start Menu/Taskbar
Control Panel
Desktop
Shared Folders
50
What is the ability to link a person's electronic identity and attributes across several independent systems?
Navy Federal
Federal ID
Federated ID
Federation ID
51
Root CA creates certificates that are self-signed
True
False
52
To change default inheritance, use the Block Policy Inheritance check box on the Group Policy tab
False
True
53
What DNS type is physically or logically at the headquarters or main offices of an organization?
Root
Child
Tree
Parent
54
Domain Name System provides the structure for Domain Name Service
False
True
55
Which of the following administrative templates can only be assigned to computers?
Network
Shared Folders
Desktop
Printers
56
What is a GPO identified by?
UGPID
GID
GPID
GUID
57
What DNS type represents a geographical entity?
Child
Parent
Root
Branch
58
Each user or group of users on a DAC can be given specific permissions by making a Access Control Entry (ACE)
False
True
59
Which phase of software rollout is placing the MSI package or ZAP file in a shared folder?
Software Deployment
Software Preparation
Software Maintenance
Software Removal
60
What are examples of security policies?
User Policy
Account Policy
Password Policy
Kerberos Policy
61
Which Configuration settings apply to computers in the container?
Client Configurations
User Configurations
Computer Configurations
Domain Configurations
62
What are the full names associated with web addresses called?
File Transfer Protocol
Container Resource
Hyper-Text Transfer Protocol
Uniform Resource Locator
63
To handle exceptions to standard GPO conflict resolution which of the following can be used?
RSoP
GPResult
No Override
Block Policy
64
When can scripts to change computer configurations be run?
Shutdown
Logon
Startup
Logoff
65
'What you are' can be which of the following?
Biometrics
PIN
Password
CAC
66
Which form of deployment is when the program is optionally installed by the user of the domain client?
Assigning
Producing
Assisting
Publishing
67
Which setting subcategory manages automated tasks, folder redirection and security settings?
Software Settings
Windows Settings
Security Templates
System Settings
68
Certificate Repositories are created to secure Certificates
True
False
69
What is the full path to a domain object?
Uniform Resource Locator
Distinguished Name
Domain Name
Regulated Address
70
Which form of deployment is when applications are automatically installed on applicable domain clients?
Assisting
Automating
Assigning
Publishing
71
Cognitive biometrics can be which of the following?
Memorable event details
ISOPREP
Voice Recognition
Facial recognition of friends and family
72
Behavioral Biometrics can be which of the following?
Keystroke Dynamics
Fingerprint
Retinal Scan
Voice Recognition
73
Which is true of Rule Based Access Control?
Often used to managing user access to many systems
Never used for multiple systems
Manually assign roles
Automatically assign roles
74
What serves as the trusted third-party agency that is responsible for issuing the digital certificates?
Certificate Register
Certificate Manager
Certificate Controller
Certificate Authority
75
What part of the process of Access Control is when Credentials are presented?
Authentication
Access
Authorization
Identification
76
Which security policies can be applied at both domain and OU levels?
User Rights Assignment
Security Options
Account Policy
Audit Policy
77
What is a person responsible for the information?
Custodian
Owner
End User
Manager
78
What is a small automation tool?
Servers
Scheduler
Tasks
Scripts
79
Which of the below are part of the certificates life cycle?
Creation/Issuance
Expiration
Validity Period
Suspension
80
Which of the following are roles that may have access to objects and/or resources?
Owner
Custodian
Server
End User
81
Which step of a GPO load order is as follows: Client Computer applies the settings and runs the scripts?
4
3
2
1
82
Which Configuration settings apply to users in the container?
Domain Configurations
Client Configurations
Computer Configurations
User Configurations
83
Certificates are secured using the X-509 PKI
False
True
84
Kerberos is the only authentication process
False
True
85
What is a person to whom everyday actions have been assigned by the owner?
Custodian
End User
Manager
Owner
86
Which of the following is a weakness of Role Based Access Control (RoleBAC)?
Lots of overhead
Unmanaged
Micromanaged
Only one role per user
87
What part of the process of Access Control is when the right to access resources is given?
Access
Authorization
Identification
Authentication
88
What allows you to redirect the contents of a user's profile to another folder?
User Management
Folder Redirection
Task Automation
User Redirection
89
Which setting subcategory manages OS and control panel settings?
Administrative Templates
Software Settings
System Settings
Control Settings
90
There are two kinds of Certificate Authority (CA): Root and Subordinate
False
True
91
What is a user that has access to the information in the course of routine duties?
End User
Custodian
Manager
Owner
92
What is the name of the domain object being accessed?
Object Name
Object Address
Relative Distinguished Name
Regulated Address
93
What is granting or denying approval through Authentication and Authorization to use specific resources?
Access Management
Access Control
Access List
Access Authentication
94
The Kerberos Key Distribution Center (KDC) authenticates users and provides the Ticket-Granting ticket (TGT)
False
True
95
What is the highest level of the DNS hierarchy?
Forest
Trunk
Root
Tree
96
Which phase of software rollout is either assigning or publishing applications to GPOs?
Software Maintenance
Software Preparation
Software Deployment
Software Removal
97
Multifactor authentication is when you utilize one form of authentication
True
False
98
What is a specific resource, such as a file or hardware device?
Subject
Operation
Object
User

Server 105-107 Flashcards | StudBud