You work as the network administrator for Certifyme.com. The Certifyme.com
network contains 50 application servers that are configured with Windows Server
2003. At present the security configuration of the Certifyme.com is not uniformly
applied. Local administrators, based on their different knowledge and skill levels,
were responsible for the configuration of the security settings on each of the
application servers.350-001 This resulted in a wide variety of authentication methods, audit
settings and account policy settings.
Certifyme.com therefore appointed a security team to complete a new network
security design.640-802 Included in the design is a baseline configuration for the security
settings on all servers.
VCP-310 The baseline security settings use the hisecws.inf predefined
security template. The design also requires modified settings for servers in an
application server role. These settings include system service startup requirements,
renaming the administrator account, and more stringent account lockout policies.
The security team created a security template named application.inf that contains
the required settings.
You received instruction to plan the deployment of the new security design. Your
plan must ensure that all application servers' security settings are standardized, and
that after the security settings on all application servers comply with the design
requirements.
What should you do?
A. First apply the setup security.inf template, and then apply the hisecws.inf template,
and then the application.inf template.
B. First apply the Application.inf template and then the Hisecws.inf template.
C. First apply the Application.inf template, and then apply the setup.inf template, and
then the hisecws.inf template.
D. First apply the Setup.inf template and then the application.inf template
Leading the way in IT testing and certification tools, www.certifyme.com
- 18 -
Answer: A.
Explanation: The servers currently have different security settings. Before applying
our modified settings, we should reconfigure the servers with their default settings.
This is what the security.inf template does. Now that our servers have the default
settings, we can apply our baseline settings specified in the hisecws.inf template.
Now we can apply our custom settings using the application.inf template.
Incorrect Answers:
B: The hisecws.inf template would overwrite the custom application.inf template.
C: The setup.inf security template doesn't exist. To return a system to its default security
settings, we use the security.inf template.
D: The setup.inf security template doesn't exist. To return a system to its default security
settings, we use the security.inf template.
Reference:
Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam
70-294); Planning, Implementing, and Maintaining a Microsoft Windows Server 2003
Active Directory Infrastructure, Microsoft Press, Redmond, Washington, 2004, p. 13:62
David Watts & Will Willis, Windows Server 2003 Active Directory Infrastructure Exam
Cram 2 (Exam 70-294): Que Publishing, Indianapolis, 2004, Chapter 8
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment