CNAB- Built-in security mechanisms for
Windows Exam Questions With Correct
Answers
SID: - CORRECT ANSWER✔✔-Security Identifier (SID): used to uniquely identify a
| | | | | | | | | | |
security principal or security group
| | | |
+Represent any entity that can be authenticated by the OS (user account,
| | | | | | | | | | | |
computer account, thread or process)
| | | |
What SID is S-1-5-domain-500? - CORRECT ANSWER✔✔-Admin
| | | | | |
+Every computer has a local Administrator account and every domain has a
| | | | | | | | | | | |
domain Administrator account. The Administrator account is the first account
| | | | | | | | | |
created during operating system installation. The account cannot be deleted,
| | | | | | | | | |
disabled, or locked out, but it can be renamed.
| | | | | | | |
+Member of the Administrators group, and it cannot be removed from that group
| | | | | | | | | | | |
Windefender: - CORRECT ANSWER✔✔-Antivirus is available in Windows 10 and
| | | | | | | | | |
Windows 11, and in versions of Windows Server
| | | | | | |
What SID is S-1-2-0? - CORRECT ANSWER✔✔-Local, Users who log on to
| | | | | | | | | | | |
terminals that are physically connected to the system.
| | | | | | |
, What SID is S-1-5-80-0? - CORRECT ANSWER✔✔-All Services, A group that
| | | | | | | | | | |
includes all service processes configured on the system. Membership is controlled
| | | | | | | | | |
|by the operating system
| | |
What SID is S-1-2-1? - CORRECT ANSWER✔✔-Console Logon, A group that
| | | | | | | | | | |
includes users who are logged on to the physical console.
| | | | | | | | |
What SID is S-1-5-18? - CORRECT ANSWER✔✔-System (or LocalSystem)
| | | | | | | |
What are the three types of DACL Rights? - CORRECT ANSWER✔✔-1. Simple
| | | | | | | | | | | |
DACL rights |
2. Specific DACL rights
| | |
3. Inheritance rights
| |
DACL: - CORRECT ANSWER✔✔-Discretionary Access Control List (DACL): controls
| | | | | | | | |
access to files and directories
| | | |
What SID is S-1-5-domain-512? - CORRECT ANSWER✔✔-Domain admins
| | | | | | |
+Domain Admins is the default owner of any object that is created in the
| | | | | | | | | | | | | |
domain's Active Directory by any member of the group. If members of the group
| | | | | | | | | | | | | |
create other objects, such as files, the default owner is the Administrators group.
| | | | | | | | | | | |
+By default, the Domain Admins group is a member of the Administrators group
| | | | | | | | | | | | |
on all computers that have joined the domain, including domain controllers.
| | | | | | | | | |
What are the 7 Simple DACL Rights? - CORRECT ANSWER✔✔-1. No Access (N)
| | | | | | | | | | | |
2. Read Only (R)
| | |
Windows Exam Questions With Correct
Answers
SID: - CORRECT ANSWER✔✔-Security Identifier (SID): used to uniquely identify a
| | | | | | | | | | |
security principal or security group
| | | |
+Represent any entity that can be authenticated by the OS (user account,
| | | | | | | | | | | |
computer account, thread or process)
| | | |
What SID is S-1-5-domain-500? - CORRECT ANSWER✔✔-Admin
| | | | | |
+Every computer has a local Administrator account and every domain has a
| | | | | | | | | | | |
domain Administrator account. The Administrator account is the first account
| | | | | | | | | |
created during operating system installation. The account cannot be deleted,
| | | | | | | | | |
disabled, or locked out, but it can be renamed.
| | | | | | | |
+Member of the Administrators group, and it cannot be removed from that group
| | | | | | | | | | | |
Windefender: - CORRECT ANSWER✔✔-Antivirus is available in Windows 10 and
| | | | | | | | | |
Windows 11, and in versions of Windows Server
| | | | | | |
What SID is S-1-2-0? - CORRECT ANSWER✔✔-Local, Users who log on to
| | | | | | | | | | | |
terminals that are physically connected to the system.
| | | | | | |
, What SID is S-1-5-80-0? - CORRECT ANSWER✔✔-All Services, A group that
| | | | | | | | | | |
includes all service processes configured on the system. Membership is controlled
| | | | | | | | | |
|by the operating system
| | |
What SID is S-1-2-1? - CORRECT ANSWER✔✔-Console Logon, A group that
| | | | | | | | | | |
includes users who are logged on to the physical console.
| | | | | | | | |
What SID is S-1-5-18? - CORRECT ANSWER✔✔-System (or LocalSystem)
| | | | | | | |
What are the three types of DACL Rights? - CORRECT ANSWER✔✔-1. Simple
| | | | | | | | | | | |
DACL rights |
2. Specific DACL rights
| | |
3. Inheritance rights
| |
DACL: - CORRECT ANSWER✔✔-Discretionary Access Control List (DACL): controls
| | | | | | | | |
access to files and directories
| | | |
What SID is S-1-5-domain-512? - CORRECT ANSWER✔✔-Domain admins
| | | | | | |
+Domain Admins is the default owner of any object that is created in the
| | | | | | | | | | | | | |
domain's Active Directory by any member of the group. If members of the group
| | | | | | | | | | | | | |
create other objects, such as files, the default owner is the Administrators group.
| | | | | | | | | | | |
+By default, the Domain Admins group is a member of the Administrators group
| | | | | | | | | | | | |
on all computers that have joined the domain, including domain controllers.
| | | | | | | | | |
What are the 7 Simple DACL Rights? - CORRECT ANSWER✔✔-1. No Access (N)
| | | | | | | | | | | |
2. Read Only (R)
| | |
