Lab: Using Group Policy Objects and Microsoft Baseline Security Analyzer for Change Control

Overview

There are many tools and suites designed to aid the security practitioner and the organization in implementing and managing change management. In this lab, you explored two such tools for the Windows platform: Group Policy Objects (built into the Windows operating systems) and the Microsoft Security Baseline Analyzer (provided free of charge). You used Group Policy Objects to strengthen the organization's password policy by adding complexity and minimum password length requirements. You scanned the Windows server with the Microsoft Baseline Security Analyzer (MBSA) to assess its security state, and you examined the results of the Microsoft Baseline Security Analyzer in detail.

Lab Assessment Questions & Answers

1. Define why change control management is relevant to security operations in an organization.

2. Name six (6) policies you could enable in a Windows Domain.

3. What is the minimum password length enforced by the Password must meet complexity requirements policy?

4. What sources could you use as a source to perform the MBSA security scan?

5. What are some of the options that you can exercise when initiating the MBSA scan?