ITSY-2400 Chapter 3 Exam Questions
And Answers
/. Whenever Windows encounters an access control entry (ACE) conflict, which of the
following is true?
A.Deny always supersedes Allow.
B.Deny always supersedes Full Control.
C.Full Control always supersedes Deny
D.Allow always supersedes Deny. - Answer-✅A
/.Which of the following stores all user and computer Kerberos master keys?
A.User account control (UAC)
B.Key distribution center (KDC)
C.Access control entry (ACE)
D.Dynamic access control (DAC) - Answer-✅B
/.Kevin is using security policy to detail what tasks the organization's users can perform
on their computers. Choose the best statement that applies to what Kevin is defining.
A.Kevin is defining user rights.
B.Kevin is defining what a user can do to any object.
C.Kevin is generating the access control list (ACL) per user
D.Kevin is generating the access control entry (ACE) per user. - Answer-✅C [X] A
/.Which security feature in Windows Server 2019 provides the ability for auditors and
forensic investigators to discover who accessed sensitive data?
A.File Classification Infrastructure (FCI)
B.Rights Management Services (RMS)
, C.Dynamic Access Control (DAC)
D.User Account Control (UAC) - Answer-✅C
/.Which term describes what a user can do to an object on a computer?
A.Permissions
B.Authentication
C.Access control
D.Rights - Answer-✅A
/.Various contractors working at the organization all have access to a general projects
folder. Unfortunately, Oscar is concerned that contractors hired for one project might be
viewing project files of other contractors. What should be Oscar's next step?
A.Calculate Microsoft Windows access permissions per project
B.Use the Integrity Control Access Control List (icacls.exe) CLI tool to track access
C.Use the Control Access Control List (cacls.exe) CLI tool to track access
D.Use expression-based security audit policy to track contractors' access - Answer-✅D
/.Which of the following is used to uniquely identify objects such as computers, web
browsers, and database records?
A.Globally unique identifier (GUID)
B.Class identifier (CLSID)
C.Universally unique identifier (UUID)
D.System identifier (SID) - Answer-✅A
/.Which of the following Windows object permissions provides no restrictions on access
to objects by users or groups?
A.Full Control
B.Write
C.Modify
And Answers
/. Whenever Windows encounters an access control entry (ACE) conflict, which of the
following is true?
A.Deny always supersedes Allow.
B.Deny always supersedes Full Control.
C.Full Control always supersedes Deny
D.Allow always supersedes Deny. - Answer-✅A
/.Which of the following stores all user and computer Kerberos master keys?
A.User account control (UAC)
B.Key distribution center (KDC)
C.Access control entry (ACE)
D.Dynamic access control (DAC) - Answer-✅B
/.Kevin is using security policy to detail what tasks the organization's users can perform
on their computers. Choose the best statement that applies to what Kevin is defining.
A.Kevin is defining user rights.
B.Kevin is defining what a user can do to any object.
C.Kevin is generating the access control list (ACL) per user
D.Kevin is generating the access control entry (ACE) per user. - Answer-✅C [X] A
/.Which security feature in Windows Server 2019 provides the ability for auditors and
forensic investigators to discover who accessed sensitive data?
A.File Classification Infrastructure (FCI)
B.Rights Management Services (RMS)
, C.Dynamic Access Control (DAC)
D.User Account Control (UAC) - Answer-✅C
/.Which term describes what a user can do to an object on a computer?
A.Permissions
B.Authentication
C.Access control
D.Rights - Answer-✅A
/.Various contractors working at the organization all have access to a general projects
folder. Unfortunately, Oscar is concerned that contractors hired for one project might be
viewing project files of other contractors. What should be Oscar's next step?
A.Calculate Microsoft Windows access permissions per project
B.Use the Integrity Control Access Control List (icacls.exe) CLI tool to track access
C.Use the Control Access Control List (cacls.exe) CLI tool to track access
D.Use expression-based security audit policy to track contractors' access - Answer-✅D
/.Which of the following is used to uniquely identify objects such as computers, web
browsers, and database records?
A.Globally unique identifier (GUID)
B.Class identifier (CLSID)
C.Universally unique identifier (UUID)
D.System identifier (SID) - Answer-✅A
/.Which of the following Windows object permissions provides no restrictions on access
to objects by users or groups?
A.Full Control
B.Write
C.Modify
