MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

27-14 Chapter 27 Configuring, Managing, and Troubleshooting Security
3. Correct Answers: C
A. Incorrect: The startup parameters field is located on the General tab in the Properties
dialog box for each service. The parameters in this field are included in the
command that launches the service when the service is started from this dialog
box; there are no command-line parameters for configuring the logon message
text.
B. Incorrect: The Display program is used for configuring desktop appearance,
screen saver options, display resolution, color depth, and other display-related
options; you cannot configure a logon message from this tool.
C. Correct: This is how you configure this setting on stand-alone and workgroup
computers. There is a second setting usually configured with this one called Interactive
Logon: Message Title For Users Attempting To Log On that is displayed in
the title bar for the dialog box displaying the logon message. When you are configuring
this setting on large numbers of Windows XP Professional computers, it is
more efficient to apply this setting via a domain-based GPO.
D. Incorrect: Windows XP Professional does not use a text file to determine
whether it should display a text message when users attempt to log on interactively,
nor does Windows XP store a logon message in a text file.
4. Correct Answers: A and C
A. Correct: The Resultant Set Of Policy snap-in is a very useful tool for determining
what a computer’s effective security settings will be when security settings are
defined by multiple layers of policy, such as both GPOs and local security policy.
However, you cannot change a computer’s configuration settings by using this
tool.
B. Incorrect: You can use the Secedit command-line tool to apply a security template
to a computer by using the /configure parameter.
C. Correct: You can use the Security Templates snap-in to create and edit security
templates. However, it cannot be used to apply a security template to a computer.
D. Incorrect: You can use the Security Configuration And Analysis snap-in to apply
a security template by first importing the security template into a database, rightclicking
Security Configuration And Analysis, and then clicking Configure Computer
Now.
E. Incorrect: You can use the Local Security Policy console to apply a security template
to a computer by right-clicking Security Settings and then clicking Import
Policy.