Title: Final Exam
Course: CTS 2306 Windows Professional > Section: Module 8 - Windows Backup and Recovery

Q: When you connect a print device directly to a Windows 8 computer, what components of the printing architecture are provided by the computer? (Choose all that apply.)
- Print device
- Printer
- Print server
- Printer driver
A: Printer; Print server; Printer driver

Q: If you plan to activate Public folder sharing in Windows 8, what must be done before you can select the Turn on sharing so anyone with network access can read and write files in the Public folders option on the Advanced sharing settings control panel?
- Start the DNS client service.
- Disable Network Discovery.
- Configure the Windows Firewall to allow file and folder sharing.
- Enable Network Discovery.
A: Enable Network Discovery.

Q: Windows 8 provides three basic methods for sharing the files and folders on the computer. Which of the listed items is not one of these methods?
- Any folder sharing
- Public folder sharing
- All folder sharing
- Homegroup sharing
A: All folder sharing

Q: Which of the following statements is true of Public folder sharing?
- Shares files from any location
- Shares files from their original locations
- Shares files from their default library locations
- Places all shared files in a single location
A: Places all shared files in a single location

Q: For users at home, which file sharing is most likely the simplest to set up and use?
- Any folder sharing
- Public folder sharing
- Homegroup sharing
- None of the above
A: Homegroup sharing

Q: How do you start the process to modify the default homegroup sharing configuration?
- Open the Computer Management console and select the HomeGroup node.
- Select one of your shared libraries in File Explorer and click Share in the toolbar.
- Open the HomeGroup app from the Control Panel.
- Open the local Group Policy editor console using gpedit.msc.
A: Select one of your shared libraries in File Explorer and click Share in the toolbar.

Q: It is possible to create a share that is invisible to users browsing the network simply by appending what character to the end of the share name?
- ~
- $
- !
- #
A: $

Q: Which of the following statements are true concerning share permissions? (Choose all that apply.)
- For drives formatted with the NTFS file system, share permissions are not available.
- For drives formatted with the FAT/FAT32 file system, share permissions are the only option available.
- They determine the type of access that others will have to the folder when they connect to it over the network.
- They apply whether the user attempts to access them over the network or locally.
A: For drives formatted with the FAT/FAT32 file system, share permissions are the only option available.; They determine the type of access that others will have to the folder when they connect to it over the network.

Q: What is the net effect of the following combination of share and NTFS permissions when the share is accessed over the network?
Share permission (Share tab)-Sales group: Full Control
NTFS permission (Security tab)-Sales group: Read & Execute, Modify, Write
- Members of the Sales group will be able to take ownership of files and edit content, but not delete files.
- Members of the Sales group will be able to edit content and delete files.
- Members of the Sales group will be able to take ownership of files, edit content, and change NTFS permissions.
- Members of the Sales group will be able to edit content, delete files, and change NTFS permissions.
A: Members of the Sales group will be able to edit content and delete files.

Q: Near field communication (NFC) is a low-speed, close-proximity, radio-based communication technology that is based on what existing standards?
- 802.15 (Bluetooth)
- Radio-frequency identification (RFID)
- 802.11 (Wi-Fi)
- 802.3 (Ethernet)
A: Radio-frequency identification (RFID)

Q: Which of the following printer-related terms refers to the actual physical hardware that prints data?
- Print queue
- Print server
- Printer
- Print device
A: Print device

Q: To share a printer on a Windows 8 computer, you must enable the appropriate settings in the Network and Sharing Center, just as you have to do to share files and folders. To share printers, which Sharing and Discovery settings must be turned on? (Choose all that apply.)
- Network Discovery
- PCL Pipelining
- Print Spooling
- File and Printer Sharing
A: Network Discovery; File and Printer Sharing

Q: By default, which accounts are assigned the Print permission?
- Every account assigned to the Print Operators group
- Every account assigned to the Everyone special identity
- Every account assigned to the Administrators group
- Every account considered to be a Foreign Security Principal
A: Every account assigned to the Everyone special identity

Q: Which print architecture component is a computer (or standalone device) that receives print jobs from clients and sends them to print devices that are either locally attached or connected to the network?
- Print device
- Printer
- Print server
- Printer driver
A: Print server

Q: What is the first step that you must perform if you wish to give certain users in your organization priority access to a print device so that when a print device is busy, their jobs are processed before those of other users?
- Create multiple print servers.
- Create multiple printers.
- Create multiple print devices.
- Create multiple printer drivers.
A: Create multiple printers.

Q: What is the first step to create a printer pool?
- Install multiple identical print devices.
- Install multiple identical print servers.
- Install multiple identical printers.
- Install multiple identical printer drivers.
A: Install multiple identical print devices.

Q: A printer is associated with a printer driver that takes the commands generated by the application and converts them into a language understood by the printer, which is known as a _________.

Q: What must occur for any folder you add to a library in Windows 8?

Q: What does the Effective Access display in the Advanced Security Settings dialog box show?

Q: Which print architecture component is the actual hardware that produces hard copy documents on paper or other print media?
- Print device
- Printer
- Print server
- Printer driver
A: Print device

Q: True or False: Print devices must be directly connected to a computer.

Q: What does selecting the List printer in the directory check box do when sharing a printer?

Q: What printer management command would be most appropriate to cancel printing of a problematic document?

Q: Which print architecture component is a device driver that converts the print jobs generated by applications into an appropriate string of commands for a specific print device?
- Print device
- Printer
- Print server
- Printer driver
A: Printer driver

Q: When planning your NTFS/Share permissions on storage spaces or volumes in which files/folders are shared, which of the following is generally considered the best approach?
- Share permissions: Full Control, NTFS permissions: desired access
- Share permissions: Change, NTFS permissions: Full Control
- Share permissions: Full Control, NTFS permissions: Full Control
- Share permissions: Read, NTFS permissions: desired access
A: Share permissions: Full Control, NTFS permissions: desired access

Q: Which print architecture component is the software interface through which a computer communicates with a print device?
- Print device
- Printer
- Print server
- Printer driver
A: Printer

Q: _________ are virtualized folders that enable users to access files from different locations as if they were all in the same place.

Q: In addition to configuring NTFS permissions graphically, you can also use what command-line utility?

Q: What do NTFS quotas provide an administrator?
- The ability to limit the number of files stored by users on the volume.
- The ability to prevent users from creating new folders on the volume.
- The ability to limit the quantity of storage space utilized by users on the volume.
- The ability to prevent users from granting access to their data stored on the volume.
A: The ability to limit the quantity of storage space utilized by users on the volume.

Q: An access control list (ACL) is a collection of individual permissions, which are called what?
- Access control list objects
- Access control entries
- Discretionary access control security
- Permissions descriptions
A: Access control entries

Q: How many basic and advanced permissions does NTFS provide for assignment to a folder or file?
- 24 basic, 6 advanced
- 6 basic, 4 advanced
- 16 basic, 24 advanced
- 6 basic, 14 advanced
A: 6 basic, 14 advanced

Q: Regarding NTFS permissions, when you copy NTFS files or folders from one volume to another, which of the following statements is true?
- The permissions are retained if the source and destination are on the same NTFS volume.
- The permissions are not retained, but are instead set to the default at the root of the volume being copied to.
- The permissions are retained even if the source and destination are on different NTFS volumes.
- The permissions are not retained and permissions set at destination are applied.
A: The permissions are not retained and permissions set at destination are applied.

Q: Regarding NTFS permissions, when you move NTFS files or folders from one volume to another, which of the following statements is true?
- The permissions are retained if the source and destination are on the same NTFS volume.
- The permissions are not retained, but are instead set to the default at the root of the volume being copied to.
- The permissions are retained even if the source and destination are on different NTFS volumes.
- The permissions are not retained and permissions set at destination are applied.
A: The permissions are retained if the source and destination are on the same NTFS volume.

Q: When examining effective access, there are three rules that must be understood. Which of the following is not one of these rules?
- Implicit permissions break permissions inheritance.
- Allow permissions are cumulative.
- Explicit permissions take precedence over inherited permissions.
- Deny permissions override Allow permissions.
A: Implicit permissions break permissions inheritance.

Q: When using the iacls.exe utility, what flag (e.g., /?) is used to specify that the command should be executed on all files and subfolders contained in the starting folder location?
- /Q
- /C
- /L
- /T
A: /T

Q: What is the maximum support file name length in the NTFS file system?
- 63 characters
- 512 characters
- 255 characters
- 1023 characters
A: 255 characters

Q: To use EFS on a file or folder, which of the following conditions must you first meet? (Choose all that apply.)
- You must be using an NTFS volume.
- You must not be using a storage pool.
- You must decompress the file or folder first.
- You must be in an Active Directory domain.
A: You must be using an NTFS volume.; You must decompress the file or folder first.

Q: If you apply a change to a folder to enable EFS for the folder only, what happens to the files currently in the folder?
- The files in the root of the folder are encrypted, but not the files in any child folders.
- The files currently in the folder are not encrypted.
- The files in all child folders are encrypted, but not the files in the root folder.
- No files are encrypted, only the folder.
A: The files currently in the folder are not encrypted.

Q: When deciding what your auditing policy should be, there are some key things to consider to help you decide which computers, resources, and events you want to audit. Which of the items listed is not one of the items typically considered?
- Allow users of computers the ability to manage the logs on those computers.
- Audit only pertinent items.
- Configure the size of your security logs carefully.
- Archive security logs to provide a documented history.
A: Allow users of computers the ability to manage the logs on those computers.

Q: What two basic steps must be performed to fully configure auditing for file or folder access?
- Create and configure an audit policy.
- Assign users to perform audits to the local Administrators group.
- Enable auditing on the files or folders.
- Join the computers to be audited to an Active Directory domain.
A: Create and configure an audit policy.; Enable auditing on the files or folders.

Q: Which NTFS permission should you configure for a security group when you want members of the group to be able to create new files but not make changes to existing files?
- Create Folders/Append Data
- Full Control
- Read & Execute
- Write
A: Write

Q: Permissions are stored as part of the _________, not the __________ being granted access.

Q: Why do administrators not use Allow and Deny permissions in combination with each other?

Q: Files and folders that should have their access audited must be stored on what type of volume?

Q: Which advanced NTFS permission should you configure to allow security principals to view the files in a folder without being able to open the files themselves?

Q: Which NTFS permission should you configure for a security group when you want members of the group to be able to see files contained in a folder but not to open the files contained in the folder?
- Read
- Read & Execute
- List Folder Contents
- Modify
A: List Folder Contents

Q: Which NTFS permission should you configure for a security group when you want members of the group to be able to edit existing files but not create new files?
- Create Folders/Append Data
- Write Attributes
- Delete Subfolders and Files
- Take Ownership
A: Create Folders/Append Data

Q: What type of permissions control access to specific parts of the Windows registry?
- Registry permissions
- NTFS permissions
- Active Directory permissions
- Share permissions
A: Registry permissions

Q: What type of permissions control access to specific parts of an Active Directory hierarchy?
- Registry permissions
- NTFS permissions
- Active Directory permissions
- Share permissions
A: Active Directory permissions

Q: What type of permissions control access to files and folders shared over a network?
- Registry permissions
- NTFS permissions
- Active Directory permissions
- Share permissions
A: Share permissions

Q: What type of permissions control access to the files and folders stored on disk volumes formatted with the NTFS file system?
- Registry permissions
- NTFS permissions
- Active Directory permissions
- Share permissions
A: NTFS permissions

Q: What is an elevation prompt?

Q: What service must be running in order for the UAC to function properly?

Q: In which part of the Local Security Policy will you find settings related to the maximum number of failed login attempts allowed?
- Account Policies
- Network List Manager Policies
- Software Restriction Policies
- Application Control Policies
A: Account Policies

Q: You want to change the account lockout policies for your local computer. What tools are available to assist you in making this change? (Choose all that apply.)
- Local Group Policy editor
- The secpol.msc command
- Local Security Policy editor
- The ntdsutil.exe command
A: Local Group Policy editor; Local Security Policy editor

Q: What is the most common method by which phishing attacks are launched?
- By web site
- By phone call
- By postal mail
- By email
A: By email

Q: When UAC is configured, how many tokens will an administrator account holder receive when they log in to the computer?
- One
- Two
- Three
- Four
A: Two

Q: How long after you complete the configuration of local security policies on a computer will it take for those policies to become effective?
- The next time group policy refreshes
- 90 minutes +/- 30 minutes
- The next time a user logs in to that computer
- Immediately upon completion of the configuration
A: Immediately upon completion of the configuration

Q: What is the intended function of the User Account Control (UAC) feature in Windows?
- Ensuring that applications do not corrupt each other's operating memory space
- Ensuring that all changes are authenticated
- Preventing unauthorized changes to your computer
- Preventing unauthorized users from accessing your computer
A: Preventing unauthorized changes to your computer

Q: When an administrator attempts to perform a task that requires administrative access, the system switches the account from the standard user token to the administrative token. What is this known as?
- Admin Approval Mode
- Elevation Mode
- Admin Elevation Mode
- Admin Mode
A: Admin Approval Mode

Q: What happens when the secure desktop is presented to a user?
- All other desktop controls are unaffected, except for the calling application's controls.
- All other desktop controls are completely suppressed.
- The system goes into a lockdown state, preventing any file reads or writes.
- The system locks the registry, preventing any changes from occurring.
A: All other desktop controls are completely suppressed.

Q: What is the default setting for UAC in Windows 8?
- Always notify me
- Notify me only when apps try to make changes to my computer
- Notify me only when apps try to make changes to my computer (do not dim my desktop)
- Never notify me
A: Notify me only when apps try to make changes to my computer

Q: How can you fully disable UAC in Windows 8?
- Select the Never notify me setting.
- It is not possible to disable the UAC in Windows 8.
- Use Group Policy to enable the Disable UAC setting.
- Manually edit the registry.
A: Manually edit the registry.

Q: After changing the configuration of the User Account Control: Run all administrators in Admin Approval Mode setting, what must next be done to make the change effective?
- Log out and log back in.
- Refresh group policy using gpupdate.
- Restart the Application Information Service.
- Reboot the computer.
A: Reboot the computer.

Q: What happens if the Application Information Service is disabled?

Q: What feature of Internet Explorer works in the background to analyze the web pages you visit and compare them against the dynamic database, looking for suspicious pages?
- PageScreen Filter
- SmartScreen Filter
- PageRank Algorithm
- SafePage Filter
A: SmartScreen Filter

Q: Windows SmartScreen has three levels of approval that can be configured to determine how it behaves. Which of the following does not represent one of those levels?
- Get admin approval before running an unrecognized app from the Internet.
- Warn before running an unrecognized app, but don't require administrator approval.
- Run all downloaded apps, and submit to Microsoft for offline analysis.
- Don't do anything (turn off Windows SmartScreen).
A: Run all downloaded apps, and submit to Microsoft for offline analysis.

Q: What type of attacks is Secure Boot designed to protect against?
- Boot loader attacks
- Runtime attacks
- User mode attacks
- Kernel mode attacks
A: Boot loader attacks

Q: What system requirements must you have to take advantage of Secure Boot?
- Compatibility support module
- Unified Extensible Firmware Interface
- Basic Input/Output System
- 64-bit capable CPU
A: Unified Extensible Firmware Interface

Q: What is the most efficient way to confirm that Secure Boot is enabled for your computer?
- Use the Confirm-SecureBootUEFI PowerShell cmdlet.
- Use the Enable-WindowsSecureBoot PowerShell cmdlet.
- Boot into the UEFI setup before POST and examine the Secure Boot settings.
- Boot into the BIOS and verify the Compatibility Support Module is disabled, then reboot the computer with the Windows 8 installation disk inserted and start the installation routine.
A: Use the Confirm-SecureBootUEFI PowerShell cmdlet.

Q: When a user logs on to Windows 8, the system issues a __________, which indicates the user's access level.

Q: __________ are advanced security settings that you configure to either restrict or allow certain activities on your local computer.

Q: Which UAC Group Policy setting would best be used to require that the built-in Administrator account on domain joined computers runs in Admin Approval Mode, which requires a UAC prompt for privileged operations?
- User Account Control: Behavior of the elevation prompt for standard users
- User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
- User Account Control: Admin Approval Mode for the Built-in Administrator account
- User Account Control: Switch to the secure desktop when prompting for elevation
A: User Account Control: Admin Approval Mode for the Built-in Administrator account

Q: To prevent unsigned applications from being executed, what UAC Group Policy setting should you configure?

Q: The SmartScreen Filter technology, integrated into the operating system's File Explorer, is called ___________.

Q: Which of the following provides the best explanation of the term malware?
- Software on your system that does not work properly
- An attempt to steal your personal identity information and credentials
- An attempt to convince you to purchase unwanted items
- Software installed on your system without your consent
A: Software installed on your system without your consent

Q: Which UAC Group Policy setting would best be used to force all application installation attempts to fail?
- User Account Control: Switch to the secure desktop when prompting for elevation
- User Account Control: Only Elevate executables that are signed and validated
- User Account Control: Behavior of the elevation prompt for standard users
- User Account Control: Detect application installations and prompt for elevation
A: User Account Control: Detect application installations and prompt for elevation

Q: In which part of the Local Security Policy will you find legacy rules that define which applications are or are not allowed to be used on the computer?
- Account Policies
- Network List Manager Policies
- Software Restriction Policies
- Application Control Policies
A: Software Restriction Policies

Q: In which part of the Local Security Policy will you find settings that provide a more streamlined and effective approach to limiting software execution?
- Account Policies
- Network List Manager Policies
- Software Restriction Policies
- Application Control Policies
A: Application Control Policies

Q: In which part of the Local Security Policy will you find settings that control how Windows 8 applies firewall settings on different networks?
- Account Policies
- Network List Manager Policies
- Software Restriction Policies
- Application Control Policies
A: Network List Manager Policies

Q: A picture password is made up of what components? (Choose all that apply.)
- A picture
- A PIN
- A password
- A gesture
A: A picture; A gesture

Q: Where are user accounts stored for computers that are in a workgroup?
- Accounts Manager Datastore
- Security Accounts Manager
- Directory Information Tree
- Local Security Authority
A: Security Accounts Manager

Q: Which of the following is not an allowed gesture for a picture password?
- Circles
- Straight lines
- Taps
- Arcs
A: Arcs

Q: During the installation of Windows 8, a built-in Administrator account is created on the computer. Which of the following statements is true concerning this account? (Choose all that apply.)
- The account is disabled.
- The account has its password set as the computer name.
- The account has no password set.
- The account is enabled.
A: The account is disabled.; The account has no password set.

Q: What type of account is required to purchase apps from the Windows Store?
- A local account
- A domain account
- A Microsoft account
- A special identity
A: A Microsoft account

Q: What must you do, at a minimum, before you can manage domain objects on a Windows 8 workstation?
- Be added to the Domain Admins group
- Install the Remote Server Administration Tools for Windows 8
- Be added to the Power Users local group
- Install the Operations Manager agent for Windows 8
A: Install the Remote Server Administration Tools for Windows 8

Q: Which two of the listed account control options are mutually exclusive?
- User must change password at next logon
- User cannot change password
- Account is disabled
- Password never expires
A: User must change password at next logon; Password never expires

Q: The Network Service special identity allows services, configured to run as a network service, permissions on the computer equivalent to what built-in group?
- Power Users
- Users
- IIS_IUSRS
- Administrators
A: Users

Q: Digital certificates, smart cards, picture passwords, and biometrics are used to perform what action?
- Integrity
- Confidentiality
- Authorization
- Authentication
A: Authentication

Q: Which of the following items is not supported as a method of authentication in Windows 8?
- Picture passwords
- Biometrics
- PIN passwords
- One-time passwords
A: One-time passwords

Q: Generally speaking, which of the following password conditions is not considered to be part of a strong password?
- A long password
- A complex password
- A frequently changed password
- A predictable password
A: A predictable password

Q: What negative side effects will occur if an administrator resets the password for a local account? (Choose all that apply.)
- The user loses access to his or her password reset disk.
- The user loses access to all EFS-encrypted files.
- The user loses access to certificates in the personal certificate store.
- The user loses access to data on network shares.
A: The user loses access to certificates in the personal certificate store.; The user loses access to data on network shares.

Q: _________ is the process of granting an authenticated user a specific degree of access to specific computer or data resources

Q: What is the only modifiable attribute of a local group?

Q: What name is commonly used to describe an authentication process that requires you to present more than one piece of authentication information, such as using a smart card and a PIN code?

Q: How does Microsoft provide native support for the usage of biometrics as an authentication factor?

Q: The members of which built-in security group have user rights enabling them to override permissions for the sole purpose of backing up and restoring files, folders, and other operating system elements?
- Performance Log Users
- Power Users
- Backup Operators
- Users
A: Backup Operators

Q: What command-line utility could be used to elevate privileges in a script?
- cacls.exe
- icacls.exe
- runas.exe
- uacrun.exe
A: runas.exe

Q: You want to allow three employees in your company the ability to back up data on the computer. To which local group should you add their accounts in order to grant them the least amount of privileges required to perform their assigned duties?
- Administrators
- Power Users
- Users
- Backup Operators
A: Backup Operators

Q: To enable roaming profiles, what attribute would you need to modify on a user account?
- Profile path
- Logon script
- Local path
- Connect
A: Profile path