MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

Page
16-44
Questions and Answers
16-69
3. Why does forcing users to press CTRL+ALT+DELETE improve security on your
computer?
Requiring users to press CTRL+ALT+DELETE to log on to the computer increases security on your
computer because you are forcing users to use a key combination recognized only by Windows.
Using this key combination ensures that users are giving the password only to Windows, not to
a program waiting to capture user passwords.
4. By default, Windows XP Professional displays the last user name to log on to the
computer in the Windows Security dialog box. Why is this considered a security
risk, and what can you do to resolve it?
In some situations, displaying the last user name is considered a security risk because an
unauthorized user can see a valid user account displayed onscreen, which makes it much easier
to break into the computer. To resolve this security problem, in the Local Security Settings
window, expand the Local Policies node, and then click Security Options. In the details pane,
right-click Interactive Logon: Do Not Display Last User Name, click Properties, and select
Enabled.
Lesson 5 Review
1. What is auditing?
Auditing is a process that tracks both user activities and Windows XP Professional activities on
a computer and records these events in the security log.
2. What is an audit policy?
An audit policy defines the types of security events that Windows XP Professional records in the
security log on each computer.
3. When you are auditing events on a computer running Windows XP Professional,
where are the audited events being recorded?
Windows XP Professional writes events to the security log on the computer on which the event
occurs.
4. What are the requirements to set up and administer auditing?
You must have the Manage Auditing And Security Log user right for the computer for which you
want to configure an audit policy or review an audit log. The files and folders you want to audit
must be on an NTFS volume.
5. What are the two steps in setting up auditing?
Setting the audit policy and enabling auditing of specific resources
6. By default, any auditing changes that you make to a parent folder
________________ (are inherited/are not inherited) by all child folders and all files
in the parent and child folders.
Are inherited