MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

21-18 Chapter 21 Installing Windows XP Professional (1.0)
5. Correct Answers: D
A. Incorrect: This procedure does not minimize the risk of being successfully
attacked because Windows XP has several vulnerabilities that are removed only
after updates have been applied. Therefore, the computer might be exploited
while Automatic Updates is downloading and installing the updates.
B. Incorrect: This procedure does not minimize the risk of being successfully
attacked because Windows XP has several vulnerabilities that are removed only
after updates have been applied. Therefore, the computer might be exploited after
it is connected to the Internet, but before the latest service packs and updates have
been applied. Even if you might apply these updates as quickly as possible, your
computer can be compromised within a few minutes of being connected to the
Internet.
C. Incorrect: This procedure does not minimize the risk of being successfully
attacked because Windows XP has several vulnerabilities that are removed only
after updates have been applied. Therefore, the computer might be exploited after
it is connected to the Internet, but before the latest service packs and updates have
been applied. Even if you might apply these updates as quickly as possible, your
computer can be compromised within a few minutes of being connected to the
Internet.
D. Correct: This procedure reduces the risk of a successful network attack against
the system by remaining disconnected from the network during the installation of
Windows XP. Windows XP has many known vulnerabilities that are removed
when the latest service pack and critical updates are applied. Even performing the
installation behind a firewall is risky because the computer might be attacked by
computers on the local network infected with worms or viruses. You should consider
connecting to the Internet only after all updates have been applied.
6. Correct Answers: A
A. Correct: To add computers to a domain, the user must have the Add Workstations
To Domain user right.
B. Incorrect: Although it would solve the problem by allowing Nicole to add computers
to the domain, it would also grant Nicole many unnecessary privileges,
such as the ability to create a user account for herself that she could use to connect
to network resources after she has finished her job. The security risks associated
with this option are too great.
C. Incorrect: This domain policy setting will not allow Nicole’s account to add computers
to the domain.
D. Incorrect: The Power Users group exists only in the local user database, and
being a member of the Power Users group grants no additional domain-level
rights.