Title: Lesson 15: Quiz
Course: RITA MC - ITNW 1308 > Section: Lesson 15: Configuring Authentication and Authorization

Q: Digital certificates, smart cards, picture passwords, and biometrics are used to perform what action?
- Integrity
- Confidentiality
- Authorization
- Authentication
A: Authentication
Feedback: Authentication is the process of verifying that the identity of the person operating the computer is the same as the user account the person is employing to gain access. Typically, to be authenticated, the human user must supply some piece of information associated with the user account, such as a password; demonstrate some personal characteristic, such as a fingerprint; or prove access to an identifying possession, such as a smart card.

Q: Which of the following items is not supported as a method of authentication in Windows 8.1?
- Picture passwords
- Biometrics
- PIN passwords
- One-time passwords
A: One-time passwords
Feedback: Windows 8.1 supports the following methods of authentication: passwords, picture passwords, digital certificates, smart cards, and biometrics. Windows 8.1 also supports PIN passwords on mobile devices.

Q: Generally speaking, which of the following password conditions is not considered to be part of a strong password?
- A long password
- A complex password
- A frequently changed password
- A predictable password
A: A predictable password
Feedback: A few ways users can weaken the security of their passwords are as follows: - Short passwords - Simple passwords - Unchanging passwords - Predictable passwords

Q: A picture password is made up of what components? (Choose all that apply.)
- A picture
- A PIN
- A password
- A gesture
A: A picture; A gesture
Feedback: A picture password consists of two components: a picture and a gesture that you draw on it.

Q: Where are user accounts stored for computers that are in a workgroup?
- Accounts Manager Datastore
- Security Accounts Manager
- Directory Information Tree
- Local Security Authority
A: Security Accounts Manager
Feedback: Workgroup computers must be on the same network segment and will maintain their own local security database to store user accounts, called the Security Accounts Manager.

Q: Which of the following is not an allowed gesture for a picture password?
- Circles
- Straight lines
- Taps
- Arcs
A: Arcs
Feedback: A picture password is limited to three gestures (circles, straight lines, and taps).

Q: During the installation of Windows 8.1, a built-in Administrator account is created on the computer. Which of the following statements is true concerning this account? (Choose all that apply.)
- The account is disabled.
- The account has its password set as the computer name.
- The account has no password set.
- The account is enabled.
A: The account is disabled.; The account has no password set.
Feedback: During a typical Windows 8.1 installation, the Setup program creates an Administrator account and makes it a member of the Administrators group, giving it complete access to all areas of the operating system. However, the Setup program leaves the account in a disabled state and does not assign it a password.

Q: The Network Service special identity allows services, configured to run as a network service, permissions on the computer equivalent to what built-in group?
- Power Users
- Users
- IIS_IUSRS
- Administrators
A: Users
Feedback: The Network Service special identity provides all services configured to run as a network service with the same privileges as the Users group.

Q: What type of account is required to purchase apps from the Windows Store?
- A local account
- A domain account
- A Microsoft account
- A special identity
A: A Microsoft account
Feedback: With a Microsoft account, you can purchase apps from the Windows Store and synchronize your system settings with other computers by storing them in the cloud.

Q: Which two of the listed account control options are mutually exclusive?
- User must change password at next logon
- User cannot change password
- Account is disabled
- Password never expires
A: User must change password at next logon; Password never expires
Feedback: You cannot select the User must change password at next logon option if you have selected the Password never expires checkbox. Additionally, selecting this option automatically clears the User cannot change password checkbox.

Q: What must you do, at a minimum, before you can manage domain objects on a Windows 8.1 workstation?
- Be added to the Domain Admins group
- Install the Remote Server Administration Tools for Windows 8.1
- Be added to the Power Users local group
- Install the Operations Manager agent for Windows 8.1
A: Install the Remote Server Administration Tools for Windows 8.1
Feedback: To manage domain objects on a Windows 8.1 workstation, you must download and install Remote Server Administration Tools for Windows 8.1. You will also need privileges to manage objects, which can be obtained in a number of ways depending on your organizations practices and policies.

Q: What is the term used when a password is obtained through tricking a user into giving it to another party?
- Brute force
- Cracking
- Social engineering
- Smishing
A: Social engineering
Feedback: Password discovery is a process in which the intruder tries to guess a password based on the users personal information, or tries to dupe the user into supplying the password. This is also known as social engineering.

Q: When the Password Must Meet Complexity Requirements setting is enabled, which of the listed required are now enforced for passwords? (Choose all that apply.)
- Must include characters from at least three of the following four categories: uppercase letters, lowercase letters, numbers, and symbols
- Must be at least six characters long
- Must not use any part of the user’s account name
- Must not use any part of the organization’s name
A: Must include characters from at least three of the following four categories: uppercase letters, lowercase letters, numbers, and symbols; Must be at least six characters long; Must not use any part of the user’s account name
Feedback: When enabled, passwords supplied by users must be at least six characters long, with no duplication of any part of the users account name, and must include characters from at least three of the following four categories: uppercase letters, lowercase letters, numbers, and symbols. By default, this policy is disabled.

Q: What command-line utility could be used to elevate privileges in a script?
- cacls.exe
- icacls.exe
- runas.exe
- uacrun.exe
A: runas.exe
Feedback: It is possible to use the runas.exe command-line program to execute an application using any other account.

Q: What negative side effects will occur if an administrator resets the password for a local account? (Choose all that apply.)
- The user loses access to his or her password reset disk.
- The user loses access to all EFS-encrypted files.
- The user loses access to certificates in the personal certificate store.
- The user loses access to data on network shares.
A: The user loses access to certificates in the personal certificate store.; The user loses access to data on network shares.
Feedback: An administrative reset causes the user to lose access to all EFS-encrypted files, all certificates in the users personal certificate store, and all passwords stored in the Windows Vault. These passwords might be recoverable from a backup of the Windows Vault or the EFS key, but it would be a lot easier if the user had created a password reset disk in the first place.

Q: You want to deploy two-factor authentication and smart card technology while keeping costs low. You have a laptop that includes a Trusted Platform Module (TPM) chip. Which technology should you use?
- BitLocker
- Virtual Smart Cards
- EFS
- finger scanner
A: Virtual Smart Cards
Feedback: One factor to consider when deploying two-factor authentication and smart card technology is the cost of implementation. Windows 8.1 provides a number of new security capabilities, and one of the most interesting new features is support for virtual smart cards. For computers equipped with a Trusted Platform Module (TPM) chip that meets specification version 1.2, organizations can now get the benefits of smart card logon without making any additional investments in hardware.

Q: You want to implement Virtual Smart Cards. What is the minimum hardware that you need?
- UAC 3.0 or higher
- CMAK 3.0 or higher
- TPM version 1.2 or higher
- NTFS 5.0 or higher
A: TPM version 1.2 or higher
Feedback: The minimum hardware that you need is a Trusted Platform Module (TPM) chip that meets specification version 1.2.

Q: Which of the following Windows components must be enabled before you can use Protected Mode in IE?
- UAC
- SSL
- EFS
- Windows Updates
A: UAC
Feedback: To help protect your computer, Internet Explorer protected mode runs as a low integrity procedure, which means that Internet Explorer writes to only low-integrity disk locations such as the Temporary Internet Files folder and the standard IE storage areas, including the History, Cookies, and Favorites folders. To enable Protected mode, you must enable UAC.

Q: Which of the following terms best describes when your desktop is dimmed and you must approve or deny a UAC request?
- Secure desktop
- Secure alert
- Intruder alert
- Power Saver
A: Secure desktop
Feedback: The dimming of your desktop is referred to as the secure desktop because other programs cant run while its dimmed.

Q: What is the intended function of the User Account Control (UAC) feature in Windows?
- Ensuring that applications do not corrupt each other’s operating memory space
- Ensuring that all changes are authenticated
- Preventing unauthorized changes to your computer
- Preventing unauthorized users from accessing your computer
A: Preventing unauthorized changes to your computer
Feedback: Preventing users from accidentally changing settings on your computer and stopping malware from gaining system-wide access to your system are vulnerabilities that User Account Control (UAC) can protect against. UAC is a Windows 8.1 feature that prevents unauthorized changes to your computer.