Emmen Kap 3

Which of the following are not valid password controls? (Choose all thatapply.)

Which of the following would be an acceptable password on a Windows 7Professional system with Password Complexity enabled and MinimumPassword Length set to eight? (Choose all that apply.)

You are setting up your first secure Windows 7 Professional workstationand you are setting the password history. What are the minimum andmaximum settings you can use? (Choose the best answer.)

One form of brute force password attack uses an extensive list of predefined passwords. What is this form of brute force attack called? (Choose the bestanswer.)

Bible attack

Cracking attack

Guessing attack

Dictionary attack

As the Chief Security Officer for a small medical records processingcompany, you suspect that a competitor will be attacking your network soon. Having worked in the business for a while, you’re pretty sure that this competitor will try to run a dictionary attack against one of your Windows application servers. You want to be sure your competitor can’t get into the server using this attack method. Which setting should you adjust in order toensure this attack has a limited chance at success? (Choose the best answer.)

Minimum Password Length

Account Lockout Threshold

Password History

Maximum Password Age

You are the head of the corporate security department, and the Microsoftteam has asked you for some assistance in setting the password controls ontheir new stand-alone server. Which Administrative Tool should you use toconfigure these settings?

Active Directory Users and Computers

Computer Management

Security Service

Local Security Policy

What are the two new features introduced in Windows Server 2008 that permit the use of fine-grained password policies ? (Choose all thatapply.)

Global Policy Object

Password Settings Container

Password Settings Object

Password Policy

Why would you use a minimum password age?

To ensure that someone does not guess a password

To stop someone from trying over and over to guess a password

To make sure a user does not reset a password multiple times untilhe or she can reuse his or her original password

To automatically reset a password