Question 1

NTFS permissions can be easily circumvented when you have physical access to a computer.

Accepted Answer

When a person has physical access to a computer, they can bypass NTFS permissions by gaining access to the hard drive through methods such as booting from a live CD or removing the hard drive altogether and accessing it on another computer. Therefore, NTFS permissions are not secure when an attacker has physical access to a machine.

Question 2

____ is(are) used to define which programs are allowed or disallowed in the system.

Accepted Answer

AppLocker is a feature of Windows that allows administrators to define which programs are allowed or disallowed in the system.

Question 3

____ is software that is silently installed on your computer, monitors your behavior, and performs actions based on your behavior.

Accepted Answer

Spyware is software that is installed on a computer without the user's knowledge or consent, and it collects information about the user's behavior and sends it to a third party. Spyware is often used for advertising purposes or to gather personal information, such as login credentials or credit card numbers. Unlike adware, spyware operates silently and is designed to be stealthy so that the user is unaware that it is collecting and transmitting data.

Question 4

The most critical effect of malware is degraded system performance.

Accepted Answer

Malware can cause a variety of critical effects beyond degraded system performance, including data theft, unauthorized access to sensitive information, and system damage, which can be more severe.

Question 5

A(n) ____ computer is one that has outdated antivirus signatures or is missing security updates.

Accepted Answer

An "unhealthy" computer is one that has outdated antivirus signatures or is missing security updates, making it more vulnerable to security threats.

Question 6

____ is a threat to privacy and often makes systems unstable.

Accepted Answer

Spyware is a type of malware that can track and record user activities without their knowledge, posing a serious threat to privacy. Some types of spyware can also disrupt system operations and cause instability. Windows Defender and EFS are security features intended to protect against malware and secure data, respectively, and macro scripts are legitimate tools for automating repetitive tasks.

Question 7

A(n) ____ policy controls password characteristics for local user accounts.

Accepted Answer

Password policy controls the password characteristics, such as length, complexity, and expiration for local user accounts. Account lockout policy determines the number of failed login attempts before an account is locked out. Domain policy is applied to user accounts in a domain setting. User control is a broad term that encompasses policies and settings that control various aspects of user behavior and permissions.

Question 8

____ is the security process that records the occurrence of specific operating system events in the Security log.

Accepted Answer

The security process that records the occurrence of specific operating system events in the Security log is called auditing. Option A (Encrypting) is incorrect because encryption is the process of converting plaintext into ciphertext to protect the confidentiality of the data. Option B (Hashing) is incorrect because hashing is the process of producing a fixed-length output (hash) from an input message of any length for data integrity and authentication purposes. Option C (Filtering) is incorrect because filtering is the process of selecting specific data or network traffic based on defined criteria.

Question 9

Newer Windows applications use an application ____ to describe the structure of an application.

Accepted Answer

An application manifest is used to describe the structure of a Windows application, including its dependencies, version information, and required permissions. It is an XML file that is embedded in the executable file or included as a separate file.

Question 10

Every object in Windows 7 has audit events related to it.

Accepted Answer

Yes, every object in Windows 7 has associated audit events to track access and changes to the object. This includes files, folders, registry keys, and more. These audit events can be viewed and analyzed using Windows Event Viewer or other third-party auditing tools.

Question 11

While ____ is a great source of information, it is also the biggest source of malware (malicious software).

Accepted Answer

The Internet is a great source of information, but it's also the biggest source of malware. This is because there are countless websites that contain malware, and it's easy to accidentally download or click on something that infects your computer. It's important to have proper antivirus software and to practice safe browsing habits to minimize the risk of malware infection.

Question 12

In Windows 7, advanced audit policies can only be edited at a command-line.

Accepted Answer

In Windows 7, advanced audit policies can be configured through the Local Security Policy editor (secpol.msc) or Group Policy Editor (gpedit.msc), not just at the command line.

Question 13

Windows 7 includes a(n) ____ policy, which can be used to control many facets of Windows.

Accepted Answer

Windows 7 includes a local security policy which enables administrators to control many aspects of Windows, including password complexity requirements, user account lockout policies, and user rights assignments. The other options listed (NAP, EFS security, and remote) are also security features in Windows 7 but do not have the broad scope of control provided by the local security policy.

Question 14

A ____ rule condition identifies software by file location. You can specify a single file or a folder path from which software can be run.

Accepted Answer

A path rule condition specifies a file location from which software can be run. This can be a path to a single file or a folder path that includes all files within that folder. Network zone refers to a grouping of networks that have a common security posture, hash rule condition identifies software by its hash value, and certificate rule condition identifies software by its digital certificate.

Question 15

Audit ____ tracks when tasks are performed that require a user rights assignment, such as changing the system time.

Accepted Answer

Privilege use tracks when tasks are performed that require a user rights assignment, such as changing the system time. Account management tracks changes made to user accounts, groups, and computer accounts. Logon events track user logon/logoff activity. Process tracking tracks when processes are started or stopped.

Question 16

The most commonly used method for authentication is a username and password.

Accepted Answer

This is true. While there are other methods of authentication available, such as biometric authentication or two-factor authentication, the most commonly used method is still a username and password.

Question 17

You can eliminate an error generated by Applications that are not designed for Windows 7 and which require administrative privileges by using the ____.

Accepted Answer

The Application Compatibility Toolkit enables you to troubleshoot and mitigate compatibility issues for applications built on previous versions of Windows, including those that require administrative privileges.

Question 18

Using the ____ policy, you can configure an account to be temporarily disabled after a number of incorrect log-on attempts.

Accepted Answer

The account lockout policy can be used to temporarily disable an account after a specified number of incorrect log-on attempts, thus preventing unauthorized access to the system. The domain, group, and password policies do not provide this specific functionality.

Question 19

To address the risks to data stored on workstations and laptops, ____ is available on Windows 7.

Accepted Answer

BitLocker Drive Encryption is the best choice to address the risks to data stored on workstations and laptops as it provides full disk encryption to protect data from unauthorized access in case of theft or loss. NAP (Network Access Protection) is a tool to protect the network from infected or vulnerable computers, Dual Locked Hard Drive is a feature unrelated to data protection, and TPM (Trusted Platform Module) is a security chip that provides a secure storage area for cryptographic keys but does not provide data encryption.

Question 20

The local security policy is part of a larger Windows management system called ____, which can be implemented on a local computer, but is typically part of a domain-based network.

Accepted Answer

The local security policy is a component of the Group Policy management system, which is typically used in a domain-based network.

Quiz 7: Windows 7 Security Features