Upgrade to remove ads
Only $2.99/month

2372 server admin. chapter 15

Terms in this set (16)

1. What is the default authentication protocol for non-domain computers?
a. NTLM
2. What does the acronym NTLM stand for?
c. NT LAN Manager
3. NTLM uses a challenge-response mechanism for authentication without doing what?
c. sending a password to the server
4. What type of protocol is Kerberos?
a. a secure network authentication protocol
5. Kerberos security and authentication are based on what type of technology?
b. secret key
6. What is the default maximum allowable time lapse between domain controllers and client systems for Kerberos to work correctly?
b. 5 minutes
7. Which three components make up a service principal name (SPN)?
d. service class, host name, and port number
8. What happens if a client submits a service ticket request for an SPN that does not exist in the identity store?
b. The client receives an access denied error.
9. Which tool can you use to add SPNs to an account?
d. ADSI Edit
10. What are the two restrictions for adding SPNs to an account?
a. Domain Administrator privileges
d. the editor runs from the domain controller
11. Identify another utility that you can use to add SPNs to an account.
c. setspn
12. What type of account is an account under which an operating system, process, or service runs?
c. service
13. When creating accounts for operating systems, processes, and services, you should always configure them with what two things in mind?
a. using strong passwords
b.
c. granting the least rights possible
d.
14. Name two benefits to using Managed Service Accounts (MSAs).
a.
b. automatic password management
c. simplified SPN management
d.
15. By default, which service accounts will the Windows PowerShell cmdlets manage?
c. group MSAs
16. Which of the following is the format for a virtual account used with Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2?
c. NT Service\servicename
THIS SET IS OFTEN IN FOLDERS WITH...