Part -1:

1. Question : When a driver is verified, a unique digital signature is incorporated into it in a process called .

2. Question : File System can be used to encrypt individual files on a file system.

3. Question : a protocol often used to create VPNs, uses a PPP frame that has a payload encrypted using Microsoft Point-to-Point Encryption (MPEE).

4. Question : To view the event logs in text format from the SYSTEM log, use the following command.

5. Question : List and define three different types of certificate authority (CA).

6. Question : Student Answer:

Explain how to implement a virtual private network (VPN).

7. Question : Describe four advanced boot options after you press F8 during the boot process.

Part -2:

NETW 230 Week 8 Final Exam Set 1

1. Question : enables multiple servers to work together to provide high availability of services and applications. It links two or more discrete computer systems so they appear to function as though they are one.

2. Question : A domain is a grouping of network objects, such as computers, servers, and , that provides for easier management.

3. Question : Each has one or more access control entries (ACEs) that state which objects have permissions to the file or folder and what permissions they have.

4. Question : The simplest way to initiate installation from another OS is to pass an unattended install answer file to the setup command. Use the Windows Kit to create an answer file for automating Windows Server 2008 installation.

5. Question : When the is assigned to a file, users can view the attributes, such as read-only and hidden, of a file or folder.

6. Question : The IPC$ share is used for interprocess communication between

7. Question : Along with the various security options on an object, you can stop permission inheritance from an object's parent by unselecting the permissions from the Object's Parent check box.

8. Question : A RAID 1 volume requires disk drives.

9. Question : For servers that need to offer services to the Internet, consider using a demilitarized zone (DMZ), where computers can exist and communicate with the Internet and the DMZ is separated from the internal network by a

10. Question: The reasons for having more than one CA of any type vary and can include geography of the infrastructure, load balancing, and .

11. Question : The Secedit command line utility allows you to configure and analyze
from the command line, including performing analysis of a server compared to a template and applying the settings in a security template.

12. Question : Microsoft has created a new protocol called that encapsulates PPP frames in HTTPS traffic, allowing communication over the Secure Sockets Layer (SSL).

13. Question : Using , you can now request a statement of health (SoH) from a client when connectivity is attempted; it is a comprehensive set of security features that monitors and manages a server and its clients.

14. Question : To access special file system permissions, click the Advanced button on the tab and then select the Effective Permissions tab of the Advanced Security Settings dialog.

15. Question : If you want to view account log-on failures on a domain controller, view the log and look for the Audit Failure keyword.

16. Question : The first communication testing tool to use is . It performs a basic IP communication test by sending an IP address an echo request packet.