You are preparing a local audit policy for your workstation. No auditing is enabled.
The settings of your policy are shown in the following image:

Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point.

Correct Answer:

Explanation
First answer - Audit account logon events
Second answers - audit system events
Dozens of events can be audited in Windows. The events fall into several categories:
* Audit account logon events - audit each instance of a user logging on to or logging off from another computer in which this computer is used to validate the account. This event category is applicable to domain controllers only since DC's are used to validate accounts in domains.
* Audit account management - audit each event of account management on a computer. Examples of account maintenance include password changes, user account and group modifications.
* Audit directory service access - audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified.
* Audit logon events - audit each instance of a user logging on to or logging off from a computer. Note that this is different than the 'Audit account login events' category. This tracks the logon event to a specific server. The former tracks which domain controller authenticated the user.
* Audit object access - audit the event of a user accessing an object that has its own system access control list (SACL) specified. Examples of objects are files, folders, registry keys, printers, etc.
* Audit policy change - audit every incident of a change to user rights assignment policies, audit policies, or trust policies.
* Audit privilege use - audit each instance of a user exercising a user right.
* Audit process tracking - audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access.
* Audit system events - audit when a user restarts or shuts down the computer or when an event occurs that affects either the system security or the security log.

Comment: *

Name: *

Email: *

Verification: *

The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting it with the WPS PIN.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

• A.No change is needed
• B.WEP key
• C.Admin password
• D.Service Set Identifier (SSID)

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a mechanism that allows authentication of dial-inother network connections?

• A.RADIUS
• B.NTFS
• C.Single Sign-On
• D.VPN

Comment: *

Name: *

Email: *

Verification: *

You have an application that communicates by using plain text. You want to secure communications between the application and a server at the network layer.
What should you implement?

• A.TLS
• B.SFTP
• C.SSH
• D.IPsec

Comment: *

Name: *

Email: *

Verification: *

John works as a Network Administrator for We-are-secure Inc. The We-are-secure server is based on Windows Server 2003. One day, while analyzing the network security, he receives an error message that Kernel32.exe is encountering a problem. Which of the following steps should John take as a countermeasure to this situation? Each correct answer represents a complete solution. Choose all that apply.

• A.He should observe the process viewer (Task Manager) to see whether any new process is running on the computer or not. If any new malicious process is running, he should kill that process.
• B.He should download the latest patches for Windows Server 2003 from the Microsoft site, so that he can repair the kernel.
• C.He should restore his Windows settings.
• D.He should upgrade his antivirus program.

Comment: *

Name: *

Email: *

Verification: *