Lab 1 Assessment Questions:
1. Relate how Windows Server 2008 R2 Active Directory and the configuration of access controls achieve CIA department LANs, departmental folders, and data. By establishing security principle within the Active Directory Domain.
2. Is it a good practice to include the account and user name in the password? Why or Why not? No it is not a good idea to include the account and user name in the password because there are Hackers out there who would use either a dictionary attack or brute force attacks which go though lists to find the correct combination of words, letters, numbers and characters in order to crack user names and passwords which depending on how simple or complex it is can take anywhere from 5 minutes or 5 months to decrypt, so it is a good practice to keep everything as unique as possible.
3. To enhance the strength of user passwords, what are some of the best practices to implement for user password definitions to maximize confidentiality? In this case the best way to ensure a strong password is to use 8 or more characters such as a mixture of Uppercase. Lowercase, numbers, and symbols in order to create a complex password that would be very difficult to crack.
4. Can a defined user in Active Directory access a shared drive if that user is not part of the domain? No they should not be able to access the shared folders unless they have authorized access.
5. Does Windows Server 2008 R2 require a user’s logon/password credentials prior to accessing shared drives? Yes this has to be done in order to ensure security.
6. When looking at the Active Directory structure for Users and Computers, which group has the least amount of implied privileges? It would have to be the User groups that have the least amount of privileges.
7. When granting access to LAN systems for guests (i.e., auditors, consultants, third party individuals, etc.), what security controls do you recommend implementing to maximize CIA of production systems and data? Allow for the guests to have a limited amount of access, for example only allow guests to access non essential data, just enough to tour the site on the network, like products and services. Ensure that the guests are given a non disclosure statement and have the guests sign it after reading it.
8. When granting access for the ShopFloor group to the SFfiles within the SFfiles folder, what must be configured in the Active Directory? The Group Policy should be configured.
9. When granting access for the HumanResources group to access the HRfiles within the HRfiles folder, what muct be configured in the Active Directory? If not mistaken it should be the same as question 8 the Group Policy should be configured.