ITSY 2400 CHAPTER 3 EXAM QUESTIONS
AND ANSWERS
Which of the following is a legacy command-line tool used to display or modify access
control lists (ACLs) for files and folders, and was first introduced with Windows 2000?
A.Icacls.exe
B.Cacls.exe
C.Robocopy.exe
D.ACL.exe - Answer-B
Which default Active Directory security group in Windows Server 2012, 2016, and 2019
can create and modify most types of accounts and can log in locally to domain
controllers?
A.Account operators
B.Remote desktop users
C.Backup operators
D.IIS_IUSRS - Answer-C [X] A
Which of the following is used to represent a software application or hardware
component?
A.Least privilege user account (LUA)
B.Globally unique identifier (GUID)
C.Universally unique identifier (UUID
D.Class identifier (CLSID) - Answer-D
Which Microsoft Windows access control method is used to systematically nest
individual user accounts in groups to make securing objects more general, and involves
Accounts, Global groups, Universal groups, Local groups, and Permissions?
, A.PLUGA
B.AGULP
C.APGUL
D.PALUG - Answer-B
Mumford, the systems administrator, is aware that newer versions of Windows Server
have extended capabilities to help keep data secure. Currently, with Microsoft Windows
Server 2008 R2, his environment uses the feature called File Classification
Infrastructure (FCI) to define classification properties for files. Mumford is now wanting
to upgrade the environment to Microsoft Windows Server 2016. What additional feature
would be available as a result of this upgrade?
A.Enforcing file expiration policies based on classification
B.Automating classification of files based on location
C.More capability to respond to actions that result in file access denial
D.Capability to tag special types of data, such as Social Security numbers - Answer-D
Starting with Windows 7 and Windows Server 2007 R2, User Account Control can be
configured with which comfort levels?
A.On or Off
B.Enable or Disable
C.Never Notify to Always Notify
D.Default to Custom - Answer-C
Which of the following describes the best balance between providing necessary access
for authorized subjects and denying unnecessary access?
A.The principle of all privilege
B.The principle of most privilege
C.The principle of no privilege
D.The principle of least privilege - Answer-D
AND ANSWERS
Which of the following is a legacy command-line tool used to display or modify access
control lists (ACLs) for files and folders, and was first introduced with Windows 2000?
A.Icacls.exe
B.Cacls.exe
C.Robocopy.exe
D.ACL.exe - Answer-B
Which default Active Directory security group in Windows Server 2012, 2016, and 2019
can create and modify most types of accounts and can log in locally to domain
controllers?
A.Account operators
B.Remote desktop users
C.Backup operators
D.IIS_IUSRS - Answer-C [X] A
Which of the following is used to represent a software application or hardware
component?
A.Least privilege user account (LUA)
B.Globally unique identifier (GUID)
C.Universally unique identifier (UUID
D.Class identifier (CLSID) - Answer-D
Which Microsoft Windows access control method is used to systematically nest
individual user accounts in groups to make securing objects more general, and involves
Accounts, Global groups, Universal groups, Local groups, and Permissions?
, A.PLUGA
B.AGULP
C.APGUL
D.PALUG - Answer-B
Mumford, the systems administrator, is aware that newer versions of Windows Server
have extended capabilities to help keep data secure. Currently, with Microsoft Windows
Server 2008 R2, his environment uses the feature called File Classification
Infrastructure (FCI) to define classification properties for files. Mumford is now wanting
to upgrade the environment to Microsoft Windows Server 2016. What additional feature
would be available as a result of this upgrade?
A.Enforcing file expiration policies based on classification
B.Automating classification of files based on location
C.More capability to respond to actions that result in file access denial
D.Capability to tag special types of data, such as Social Security numbers - Answer-D
Starting with Windows 7 and Windows Server 2007 R2, User Account Control can be
configured with which comfort levels?
A.On or Off
B.Enable or Disable
C.Never Notify to Always Notify
D.Default to Custom - Answer-C
Which of the following describes the best balance between providing necessary access
for authorized subjects and denying unnecessary access?
A.The principle of all privilege
B.The principle of most privilege
C.The principle of no privilege
D.The principle of least privilege - Answer-D
