Question 1

In Windows Server 2008,____ ensures secure access and communication when Terminal Services are used over the Internet.

Accepted Answer

TS Gateway (Terminal Services Gateway) ensures secure access and communication when Terminal Services are used over the Internet. It allows remote users to connect to internal network resources without the need for a virtual private network (VPN). TS RemoteApp, TS Server, and TS Manager are not directly related to securing access and communication over the Internet.

Question 2

One reason for developing ____________________ was to enable the use of more globally available IP addresses.

Accepted Answer

The answer of One reason for developing ____________________ was to...

Question 3

Match each term with the correct statement below.
-Involves the use of tickets that are exchanged between the client who requests logon and network services access,and the server or Active Directory that grants access.

Accepted Answer

Kerberos security involves the use of tickets that are exchanged between the client who requests logon and network services access, and the server or Active Directory that grants access. This ticketing mechanism helps to ensure secure authentication and authorization.

Question 4

Match each term with the correct statement below.
-A portion of a network that is between two networks,such as between a private network and the Internet

Accepted Answer

A demilitarized zone (DMZ) is a portion of a network that is between two networks, such as between a private network and the Internet.

Answer: G
 BitLocker Drive Encryption is a security feature that encrypts the data on a hard drive to help prevent unauthorized access.

Answer: H
 802.1X is an IEEE standard that provides port-based network access control.

Answer: A
 Kerberos security is a network authentication protocol that uses encryption to verify the identities of users and computers.

Answer: B
 Network Access Protection (NAP) is a Microsoft technology that helps ensure the security and health of computers that connect to a network.

Answer: C
 TPM (Trusted Platform Module) is a hardware component that provides security-related functions, such as encryption and key management.

Answer: D
 "Exceptions" is not a term related to network security or management.

Answer: E
 User Account Control (UAC) is a security feature in Windows that helps prevent unauthorized changes to the computer. It prompts the user for confirmation before allowing changes to system settings or installed software.

Answer: I
 Group Policy Objects (GPOs) are a collection of settings in Active Directory that can be used to apply rules and policies across a network.

Question 5

To determine compliance,NAP uses a server that is a ____.

Accepted Answer

The answer of To determine compliance,NAP uses a server that...

Question 6

Match each term with the correct statement below.
-Programs that you choose to allow through the firewall in both directions

Accepted Answer

Exceptions are programs that are allowed through the firewall in both directions.

Answer: F
 A demilitarized zone (DMZ) is a section of a network that is designated to house servers that are accessible from the internet.

Answer: G
 BitLocker Drive Encryption is a security feature in Windows that encrypts the entire hard drive to prevent unauthorized access to data.

Answer: H
 802.1X is a security protocol that provides authentication and authorization for devices attempting to connect to a network.

Answer: I
 Group Policy Objects (GPOs) are settings that can be enforced on computers running Windows to control various aspects of their behavior.

The other options are not related to the given statement.

Question 7

TS Gateway combined with NAP uses the ____________________ server to ensure that a client is compliant with the health and security policies on a network.

Accepted Answer

The answer of TS Gateway combined with NAP uses the...

Question 8

____________________ policies are a subset of individual policies within a larger group policy for a site,domain,OU,or local computer.

Accepted Answer

The answer of ____________________ policies are a subset of individual...

Question 9

In terms of NAP,"____" refers to ensuring that all authenticated computers on the network have the most recent updates and comply with network security policies.

Accepted Answer

"Healthy" in the context of Network Access Protection (NAP) refers to ensuring that all authenticated computers on the network have the most recent updates and comply with network security policies.

Question 10

Match each term with the correct statement below.
-A security specification for a hardware device that can be used to secure information on a different hardware device,such as a hard drive

Accepted Answer

The security specification for a hardware device that can be used to secure information on a different hardware device, such as a hard drive, is the Trusted Platform Module (TPM).

Answer: G 
 BitLocker Drive Encryption is a feature included in some versions of Microsoft Windows that uses TPM to encrypt data on a hard drive.

Answer: H 
 802.1X is a network authentication protocol used to provide secure access to network resources.

Note: The other terms listed do not match the given statement.

Question 11

Through ____________________,NAP allows computers that are considered noncompliant to access the local network.

Accepted Answer

The answer of Through ____________________,NAP allows computers that are considered...

Question 12

Match each term with the correct statement below.
-A wired and wireless authentication approach offered by the IEEE and is supported in modern Windows operating systems including Windows XP,Windows Vista,Windows 7,and Windows Server 2003/2008

Accepted Answer

802.1X is mentioned as the wired and wireless authentication approach offered by the IEEE that is supported in Windows operating systems.

Answer: B
 NAP (Network Access Protection) is a technology mentioned as a wired and wireless authentication approach that deals with enforcing health policies on computers attempting to connect to a network.

Answer: G
 BitLocker Drive Encryption is mentioned as a type of encryption that is used to encrypt the entire drive, and it is supported in modern Windows operating systems.

Note: The other terms mentioned (A, C, D, E, F, I) are not related to wired or wireless authentication approaches in modern Windows operating systems.

Question 13

____ is used to make the implementation and troubleshooting of group policies much simpler for an administrator.

Accepted Answer

Resultant Set of Policy (RSoP) provides an overview of which policies are being applied to a particular user or group, making it easier for administrators to troubleshoot policy issues and ensure that policies are being enforced as intended.

Question 14

Match each term with the correct statement below.
-Designed to keep the user running in the standard user mode as a way to more fully insulate the kernel and to keep operating system and desktop files stabilized

Accepted Answer

User Account Control (UAC) is designed to keep the user running in standard user mode as a way to more fully insulate the kernel and to keep operating system and desktop files stabilized.

Answer: G
 BitLocker Drive Encryption is a security feature in Windows that provides full disk encryption of your data, and helps prevent unauthorized access to your system even if someone steals your computer.

Answer: I
 Group Policy Objects (GPOs) are a powerful tool used by Windows administrators to control the working environment of users and computers within an Active Directory environment.

Question 15

Using NAP,all network clients must contact the HRA server and submit information about their security policy status and recent upgrades-called a ____.

Accepted Answer

The called ‘Statement of Health' is submitted by all network clients to the HRA server through the Network Access Protection (NAP) process. This statement includes information regarding the client's security policy status and recent upgrades, and it enables the network to identify unhealthy clients and restrict their access to the network.

Question 16

____ applications means an application is automatically represented on the user's desktop,for example as a Start menu option or as an icon on the desktop,and which initially is really a link to the central application distribution server.

Accepted Answer

The answer of ____ applications means an application is automatically...

Question 17

A(n)____________________ server is one that can provide updates and security policy changes to the client to bring that client into compliance.

Accepted Answer

The answer of A(n)____________________ server is one that can provide...

Question 18

Match each term with the correct statement below.
-A comprehensive set of security features that monitors and manages a server and its clients

Accepted Answer

NAP (Network Access Protection) is a comprehensive set of security features that monitors and manages a server and its clients.

Answer: G
 BitLocker Drive Encryption provides encryption for entire disk volumes and can be used to protect data in the event that a mobile device is lost or stolen.

Answer: H
 802.1X is a port-based network access control protocol that restricts access to a network based on authentication and authorization.

Answer: I
 GPO (Group Policy Object) is a feature in Windows that allows administrators to configure settings for groups of computers or users in an Active Directory environment. It can be used to enforce security policies and restrict access to resources.

Note: The other options also relate to security features, but do not match the descriptions of the statements provided.

Question 19

Match each term with the correct statement below.
-An Active Directory object that contains group policy settings (a set of group policies)for a site,domain,OU,or local computer

Accepted Answer

GPO (Group Policy Object) is an Active Directory object that contains group policy settings for a site, domain, OU, or local computer.

Answer: G
 BitLocker Drive Encryption is a feature of Windows that allows for the encryption of a computer's hard drive to protect against data theft or tampering.

Answer: C
 TPM (Trusted Platform Module) is a security chip installed in many newer computer systems that provides hardware-based security functions.

Answer: E
 UAC (User Account Control) is a security feature in Windows that prompts the user for confirmation before allowing a program to make changes to the system.

Answer: H
 802.1X is an industry-standard security protocol used to control access to network resources.

Note: The remaining terms (A, B, D, and F) do not have a clear match with any of the statements provided.

Question 20

Match each term with the correct statement below.
-A relatively new security measure for protecting hard drives

Accepted Answer

BitLocker Drive Encryption is a security feature that provides encryption for the entire hard drive, offering protection against unauthorized access in the event of loss or theft. It's a relatively new measure compared to some of the other options listed.

Quiz 13: Securing Windows Server 2008

In Windows Server 2008,____ ensures secure access and communication when Terminal Services are used over the Internet.

One reason for developing ____________________ was to enable the use of more globally available IP addresses.

Match each term with the correct statement below. -Involves the use of tickets that are exchanged between the client who requests logon and network services access,and the server or Active Directory that grants access.

Match each term with the correct statement below. -A portion of a network that is between two networks,such as between a private network and the Internet

To determine compliance,NAP uses a server that is a ____.

Match each term with the correct statement below. -Programs that you choose to allow through the firewall in both directions

TS Gateway combined with NAP uses the ____________________ server to ensure that a client is compliant with the health and security policies on a network.

____________________ policies are a subset of individual policies within a larger group policy for a site,domain,OU,or local computer.

In terms of NAP,"____" refers to ensuring that all authenticated computers on the network have the most recent updates and comply with network security policies.

Match each term with the correct statement below. -A security specification for a hardware device that can be used to secure information on a different hardware device,such as a hard drive

Through ____________________,NAP allows computers that are considered noncompliant to access the local network.

Match each term with the correct statement below. -A wired and wireless authentication approach offered by the IEEE and is supported in modern Windows operating systems including Windows XP,Windows Vista,Windows 7,and Windows Server 2003/2008

____ is used to make the implementation and troubleshooting of group policies much simpler for an administrator.

Match each term with the correct statement below. -Designed to keep the user running in the standard user mode as a way to more fully insulate the kernel and to keep operating system and desktop files stabilized

Using NAP,all network clients must contact the HRA server and submit information about their security policy status and recent upgrades-called a ____.

____ applications means an application is automatically represented on the user's desktop,for example as a Start menu option or as an icon on the desktop,and which initially is really a link to the central application distribution server.

A(n)____________________ server is one that can provide updates and security policy changes to the client to bring that client into compliance.

Match each term with the correct statement below. -A comprehensive set of security features that monitors and manages a server and its clients

Match each term with the correct statement below. -An Active Directory object that contains group policy settings (a set of group policies) for a site,domain,OU,or local computer

Match each term with the correct statement below. -A relatively new security measure for protecting hard drives