Lab #3 - Assessment Worksheet Enabling Windows Active Directory and User Access Controls

Lab Assessment Questions & Answers

1. What are the three fundamental elements of an effective security program for information systems?

2. Of these three fundamental controls, which two are used by the Domain User Admin to create users and assign rights to resources?

3. If you can browse a file on a Windows network share, but are not able to copy it or modify it, what type of access controls and permissions are probably configured?

4. What is the mechanism on a Windows server where you can administer granular policies and permissions on a Windows network using role-based access?

5. What is two-factor authentication, and why is it an effective access control technique?

6. Relate how Windows Server Active Directory and the configuration of access controls achieve CIA for departmental LANs, departmental folders, and data.

7. Is it a good practice to include the account or user name in the password? Why or why not?