Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

IT Säk > Windows Hardening > Flashcards

Windows Hardening Flashcards

1
Q

What is a server?

A

A server is a computer that provides shared resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a client?

A

A client performs tasks for an end user.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an operating system?

A

Operating systems control the allocation and usage of hardware resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What components do servers consist of?

A

Processor
Disk
RAM Memory
Network cards

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What installation types are there for Windows Server?

A

New install, no old files
Upgrade, keep old files
Migration, move old files to another server and do a fresh install on the original server.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the benefits of Server Core?

A

Reduced Servicing Overhead
Reduced Administrative Overhead
Reduced Resource Overhead
Reduced Attack Surface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Post-installation tasks after installing a Server?

A

Activate Windows
Set Time Zone
Configure network, computer name and domain
Configure automatic updates
Add server roles and features
Enable Remote Desktop
Configure Windows Firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Automated deployment

A

Build image files
Build unattended answer files
Create deployment transmission
Initiate installation from client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a Service?

A

A long running executable that performs a specific function without user intervention.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What service startup options are there?

A

Automatic (delayed)
Automatic
Disabled
Manual

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Common causes of service failure?

A

Account restrictions
Dependencies
Corrupt or missing files

Solutions:
Reboot in Safe mode
Reboot in Last Known Good Configuration
Microsoft System Configuration Utility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a device?

A

A hardware component that serves a specific function and is installed in or attached to a computer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a device driver?

A

A device driver is a small software program that allows the computer to communicate with a specific device.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is driver signing?

A

A digital signature that shows the driver is from the publisher of the driver and whether or not it has been modified since signing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the logical components of Active Directory Domain Services?

A

Partitions
Schema
Domains
Domain Trees
Forests
Sites
Organisational units
Containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the physical components of Active Directory Domain Services?

A

Domain Controllers
Data Stores
Global catalog servers
Read only domain controllers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What do Active Directory Domain Services do?

A

Hold a database of users and computers
Replicate the database across multiple domain controllers
Administrate user and computer permissions and settings
Authenticate user sign ins within the domain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are organisational units?

A

Units from which administrative permissions and policies can be applied to groups of users and computers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are domain controllers?

A

Servers that host the Active Directory Domain System database and System volume.
Authentication via Kerberos and Key Distribution Center.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does the global catalog do?

A

Holds partial sets of attributes from domains across the forest.
For example schema information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the steps in the Active Directory Domain Services sign in process?

A
  1. User account is authenticated by the domain controller.
  2. Domain controller returns a Ticket Granting Ticket to the client
  3. The client uses the ticket to apply for access to a work station
  4. Domain controller grants access
  5. Client applies with TGT for access to the server
  6. Domain controller returns access to the server
22
Q

What is the command to install AD DS in Core?

A

Add-windowsfeature AD-Domain Services

23
Q

What happens when an object is moved between Organizational units?

A

Directly assigned permissions remain in place.
Inherited permissions change.

24
Q

What settings are copied from a template to a new user?

A

Group memberships
Home directory path
Profile path
Logon path
Password settings
Department
Manager

25
Q

Distribution groups

A

Used with email applications
Cannot be given permissions due to missing security id.

26
Q

Security groups

A

Security with security id.
can be given permissions

27
Q

What ways can you plan Organizational units?

A

Location based (Stockholm, London, Malmö, etc)
Resource Based (Servers/Computers sorted by version)
Organisation based (Sales, Research, Marketing, Managers, etc)
Multenancy based (Company 1, Company 2, Company 3, etc)

28
Q

What is IGDLA?

A

User and Computer Identity is placed into Global groups based on their roles and the global role groups get placed into domain local groups that gets assigned resources.

29
Q

What are special Identities?

A

Groups which membership depends on the authentication or connection method.
Examples:
Anonymous Logon
Authenticated Users
Everyone
Interactive
Network
Creator Owner

30
Q

When can computers lose their SID?

A

Security identities will be lost when reinstalling the computer
Restoring a computer to an old backup/snapshot
Computer and domain disagrees about the password

31
Q

How can you reset the computer SID?

A

Windows Powershell with the command
“Test-ComputerSecureChannel”

By right clicking the computer in AD U&C and selecting reset account, you will have to reconnect the client to the domain afterwards.

32
Q

How do you create a new user in Windows Powershell?

A

New-ADUser “Name” –AccountPassword (Read-Host
–AsSecureString “Enter password”) -Department IT

33
Q

How do you change properties of a user in Windows Powershell?

A

Set-ADUser “Username” -property “value”

34
Q

How do you delete a user in Windows Powershell?

A

Remove-ADUser “Username”

35
Q

How do you reset the password of an user account?

A

Set-ADAccountPassword “Username”

36
Q

How do you modify the expiration date of a user account?

A

Set-ADAccountExpiration “Username”

37
Q

How do you unlock an User Account?

A

Unlock-ADAccount “username”

38
Q

How do you enable an User account?

A

Enable-ADAccount “username”

39
Q

How do you disable an User account?

A

Disable-ADAccount “username”

40
Q

What is a Group policy setting?

A

Defines a specific configuration
Applied to a computer or user

41
Q

What is a Group Policy Object?

A

A set of group policy settings
Applied to a computer or user

42
Q

What can GPOs be linked to?

A

Sites
Domains
Organizational Units

43
Q

What can’t GPOs be linked to?

A

Users
Groups
Computers
System Containers

44
Q

When are GPOs applied?

A

Computer settings are applied on start up
User settings are applied as sign in

45
Q

In what order are GPOs applied?

A

Those that apply later overwrite the earlier ones if they clash.

Local
Site
Domain
Organization Unit
OU Child

46
Q

What are the default GPOs?

A

Default Domain Policy
Used to define account policies for the domain

Default Domain Controllers Policy
Used to define auditing
Defines user rights on the domain controllers

47
Q

What settings can you control with a password policy?

A

How old the password can be before it must be changed.
Minimum password age:
Minimum password length:
Complex password requirement: Enabled
Store passwords using reversible encryption: disabled

48
Q

What settings can you control with an account lockout policy?

A

How many incorrect login attempts can be made before user being locked
How long the User is locked
Lockout Threshold
Reset account lockout

49
Q

Kerberos Policy does what?

A

Enforce user logon restrictions
Maximum Lifetime for service ticket
Maximum Lifetime for user ticket
Maximum Lifetime for user ticket renewal
Maximum tolerance for computer clock synchronization

Applied on domain level

50
Q

What does the SSL process look like?

A
  1. The user types an HTTPS URL
  2. The web server sends its SSL certificate
  3. The client performs a check of the server certificate
  4. The client generates a symmetric encryption key
  5. The client encrypts this key with the server’s public key
  6. The server uses its private key to decrypt the encrypted
    symmetric key
51
Q

What does a digital signature ensure?

A

Content is not modified during transport
The identity of the author is verifiable

52
Q

Digital Signatures work in what way?

A

Authors computer creates a hash/digest
Authors hash/digest is encrypted with their private key
Recipient uses Author’s public key to decrypt and can then compare the hash/digest created on the recipients machine with the hash/digest that was sent. These should be identical.

IT Säk (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions