Assessment Worksheet

Implementing an Information Systems Security Policy

Overview

In this lab, you acted as a member of the network security team. You were given an assignment to implement two security standards that have been accepted by the organization. First, you enforced a newly adopted corporate password policy using the Group Policy Management console. Additionally, you joined a standalone Linux machine to the Active Directory domain using an open source tool, PowerBroker Identity Services Open.

Screenshots required by lab:

Lab Assessment Questions & Answers

1. What is the correct command syntax to force GPO settings? a. /force GPO b. gpupdate /now c. gpupdate /force d. policyupdate /force

2. Why is it important to set a strict password policy as part of your security template?

It helps guard against unauthorized access to the system from unauthorized personnel and also against bruteforce attempts, however employees can still create strict passwords and make them insecure by having them part of a series by changing only one or two characters in the password recycling most of it. By making passwords too complex it will result in the employee base recording passwords on post it notes and other documents that can be seen by anyone.

3. Why is it important to bring standalone systems into the Domain?

To provide good password management practices and help prevent unauthorized access to network resources.

4. What was the command line syntax to connect as the root user to 172.30.0.11 using PuTTY?

putty root@172.30.0.11 -pw toor

5. Name five different Windows password policies. * Password History * Password Maximum Age * Password Minimum Age * Password Minimum Length * Password Complexity * Store Passwords using Reverse Encryption

Copyright © 2014 by