SECURITY BASICS

More documents

Recommendations

Info

Copyright © 2004 by Course Technology. All rights reserved.This publication is protected by federal copyright law. No part of this publication may be reproduced without prior permission in writing from Course Technology. Some of the product names and company names have been used for identification purposes only and may be trademarks or registered trademarks of their respective manufactures and sellers. 34 Chapter 3 Security Basics Review Questions 1. What is the advantage of removing the name of the last user to log on? a. allows users to share computers b. requires users to remember their user names c. requires a hacker to take an extra step when cracking passwords d. hides the identity of the Windows domain 2. Which default Windows NT/2003 account should be renamed to assist this method of authentication protection? a. Domain Admins b. Domain Guests c. Administrator d. Guest 3. Which account should be disabled to assist this method of authentication protection? a. Guest b. Administrator c. User1 d. User2 4. Who can delete the Guest account? a. no one b. Administrator c. Domain Admins d. Guest 5. Biometrics is an additional method that can be used to secure authentication. Which of the following is an example of a biometric device? (Choose all that apply.) a. complex passwords b. fingerprints c. retinal scans d. smart cards
Copyright © 2004 by Course Technology. All rights reserved.This publication is protected by federal copyright law. No part of this publication may be reproduced without prior permission in writing from Course Technology. Some of the product names and company names have been used for identification purposes only and may be trademarks or registered trademarks of their respective manufactures and sellers. Lab 3.4 Setting an Account Lockout Policy 35 LAB 3.4 SETTING AN ACCOUNT LOCKOUT POLICY Objectives Another measure you can take to create a roadblock for hackers is to implement an account lockout policy. Hackers who have the time and patience can crack any password. An account lockout policy disables an account for a specific amount of time after a certain number of failed logon attempts.This can help delay a successful hack attempt or, better yet, discourage the hacker from continuing. After completing this lab, you will be able to: Modify the Windows Server 2003 local security policy Change the “Account lockout threshold” account lockout policy Change the “Reset account lockout counter” account lockout policy Materials Required This lab requires the following: A Windows Server 2003 server configured as a stand-alone server Administrator access to the server Two user-level accounts: User1 and User2 3 Estimated completion time: 20 minutes ACTIVITY 1. Log on to the Windows Server 2003 server as Administrator. 2. Click Start, click All Programs, click Administrative Tools, and then click Local Security Policy. 3. Expand Account Policies. 4. Click Account Lockout Policy. A screen resembling Figure 3-6 appears. 5. Double-click Account lockout threshold. 6. Change the invalid logon attempts to 3, as shown in Figure 3-7. 7. Click OK. 8. You are prompted to change the values for the Account lockout duration and Reset account lockout counter after policies, as shown in Figure 3-8. 9. Click OK to accept the changes and notice how the Security settings changed, as shown in Figure 3-9.
Page 1 and 2: 3 C H A P T E R T H R E E SECURITY
Page 3 and 4: Copyright © 2004 by Course Technol
Page 9: Copyright © 2004 by Course Technol
Page 54:
Sierra Rifle Bullets
show all

SECURITY BASICS

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?