Chapter 8

Planning a Secure Baseline Installation

8-35

Based on this information, answer the following questions:

1. Which of the following policy modifications could you make to ensure that user

passwords cannot be intercepted by analyzing captured packets?

a. Change the Enforce Password History value to 10.

b. Enable the Password Must Meet Complexity Requirements policy.

c. Change the Account Lockout Threshold value to 3.

d. Disable the Store Passwords Using Reversible Encryption policy.

2. Which of the following policy modifications would make it harder for intruders to

penetrate user passwords by trial and error? (Choose all correct answers.)

a. Change the Reset Account Logon Counter After value to 60 minutes.

b. Enable the Password Must Meet Complexity Requirements policy.

c. Change the Account Lockout Threshold value to 10.

d. Enable the Minimum Password Age policy and set its value to 3.

3. You have discovered that some users are bypassing your security requirements by

changing their passwords as required, and then immediately changing them back

again. Which of the following policy changes would prevent this practice?

(Choose all correct answers.)

a. Change the Account Lockout Duration value to 600.

b. Enable the Minimum Password Age policy and set its value to 28.

c. Change the Enforce Password History value to 10.

d. Change the Reset Account Logon Counter After value to 60.

Chapter Summary

■

Servers can perform a variety of roles in the enterprise, acting as domain control-

lers, Web servers, database servers, e-mail servers, infrastructure servers, file and

print servers, and backup servers.

■

While servers are often constructed and configured for specialized applications,

workstations are usually set up for more general purposes.

■

When creating server hardware specifications, plan for future upgrades when

selecting the number and type of processors, the amount of memory, and storage

solutions.

■

When selecting operating systems for servers, you can choose the platform best

suited to the server’s role. When selecting workstation operating systems, stan-

dardization takes precedence over specialization.