NETWORK 206
Week 4 Homework Student ID:
Chapters 7-9 Review questions Nov 06, 2012

Chapter Seven Lesson 1 Review

1. Where do local user accounts allow users to log on and gain access to resources?

Answer: Only on the computer on which the local user account is created.

2. Where should you create user accounts for computers running Windows XP Professional that are part of a domain?

Answer: You should create it on one of the domain controllers. You should not use local user accounts on Windows XP Professional computers that are part of a domain.

3. Which of the following statements about domain user accounts are correct?
(Choose all that apply.)

a. Domain user accounts allow users to log on to the domain and gain access to resources anywhere on the network, as long as the users have the required access permissions.
b. If at least one computer on the network is configured as a domain controller, you should use domain user accounts only.
c. The domain controller replicates the new user account information to all other computers in the domain.
d. A new domain user account is established in the local security database on the domain controller on which you created the account.

The correct answers are A and B. C is not correct because the domain controller replicates user account information only to other domain controllers in a domain—not to every computer. D is not correct because a domain user account is established in Active Directory, not in the local security database. A local user account is established in the local security database.

4. Which of the following statements about built-in accounts are correct? (Choose all that apply.)

a. You can delete the Guest account.
b. You cannot delete the Administrator account.
c. You cannot rename the Guest account.
d. You can rename the Administrator account.

The correct answers are B and D. A is not correct because you cannot delete the Guest account (or any built-in local user accounts, for that matter). C is not correct because you can rename the Guest account.

5. How do you disable the Guest account?

Answer: Click Start, click Control Panel, and then click User Accounts. In the User Accounts window, click the Guest icon. In the What Do You Want To Change About The Guest Account window, click Turn Off The Guest Account. The Guest Account is now disabled.

Chapter Seven Lesson 2 Review

1. The maximum number of characters that Windows XP Professional recognizes in a local user account name is __________.

Answer: 20

2. When are duplicate local user accounts valid in a network of computers running Windows XP Professional?

Answer: They are valid as long as they are not on the same computer. In fact, in a workgroup, you must create the same user account on each computer in the workgroup that you want the user to be able to access.

3. Passwords can be up to ______ characters long with a minimum length of ______ characters recommended.

Answer: 128, 8

Chapter Seven Lesson 3 Review

1. Which of the following statements about the Windows XP Professional User
Accounts tool are correct? (Choose all that apply.)

a. The User Accounts tool allows you to remotely create, modify, and delete user accounts on all computers in the network running Windows XP Professional.
b. The User Accounts tool allows you to view and modify all accounts on the computer.
c. The tasks you can perform with the User Accounts tool depend on the type of account you use to log on to the local computer.
d. The User Accounts tool allows users to delete, create, or remove their individual passwords.

Answer: The correct answers are C and D. A is not correct because you cannot use the User Accounts tool to administer a remote computer. B is not correct because the User Accounts tool does not allow you to administer certain built-in accounts.

2. Which of the following tasks can both account types (Computer Administrator and
Limited) perform? (Choose all that apply.)

a. Change your picture
b. Change your account type
c. Create, change, or remove your password
d. Change your account name

Answer: The correct answers are A and C. B and D are not correct because only computer administrators can change the account type and account name.

3. Which of the following statements about logging on or logging off a computer running Windows XP Professional are true? (Choose all that apply.)

a. When you use the Welcome screen to log on the local computer, you can quickly switch to another user account without logging off and closing all programs that you are running.
b. The User Accounts tool allows you to disable a local user account to prevent users from using the disabled account to log on.
c. When you use the Welcome screen to log on the local computer, you can log on using only one of the accounts displayed on the Welcome screen.
d. The User Accounts tool allows you to replace the Welcome screen with a logon prompt that requires users to type their individual user names and passwords.

Answer: The correct answers are A and D. B is not correct because the User Accounts tool allows you to disable the Guest account, but not to disable other user accounts. C is not correct because you can press CTRL+ALT+DELETE at the Welcome screen to access the traditional logon dialog box, which allows you to type in a user name.

4. When you use the Computer Management snap-in to create a new user account, which check box do you select to prevent a new employee from using the new account until the employee starts working for the company?

Answer: Account Disabled

Chapter Seven Lesson 4 Review

1. When can you select the Account Is Locked Out check box for a user and why?

Answer: Never because the Account Is Locked Out check box is unavailable when the account is active and is not locked out of the system. The system locks out a user if the user exceeds the limit for the number of failed logon attempts.

2. Which of the following statements about local user account properties are correct?
(Choose all that apply.)

a. You can configure all of the default properties associated with each local user account using the User Accounts tool located in Control Panel.
b. In Computer Management, the General tab in a user account’s Properties dialog box allows you to disable the account.
c. In Computer Management, the General tab in a user account’s Properties dialog box allows you to select the Account Is Locked Out check box to prevent the user from logging on to the computer.
d. You can use the Computer Management snap-in to configure all of the default properties associated with each local user account.

Answer: The correct answers are B and D. A is not correct because the User Accounts tool only provides a limited subset of the available options for a user account. You must use the Computer Management snap-in to access all options for a user account. C is not correct because you cannot select the Account Is Locked Out check box manually. This check box is selected automatically when an account is locked out.

3. Which of the following statements about user profiles are correct? (Choose all that apply.)

a. A user profile is a collection of folders and data that stores the user’s current desktop environment, application settings, and personal data.
b. A user profile contains all the network connections that are established when a user logs on to a computer.
c. Windows XP Professional creates a user profile when you create a new local user account.
d. You must create each user profile by copying and modifying an existing user profile.

Answer: The correct answers are A and B. C is not correct because Windows XP does not create a user profile when you create a user account, but rather the first time someone logs on using that user account. D is not correct because a user profile is created automatically the first time a person logs on with a user account.

4. Which of the following statements about user profiles are correct? (Choose all that apply.)
a. Users should store their documents in home directories rather than in their My Documents folders.
b. The Profile tab in the account-name Properties dialog box for a user account allows you to create a path for the user profile, logon script, and home folder.
c. A user profile contains the My Documents folder, which provides a place for users to store personal files.
d. When users change their desktop settings, the changes are reflected in their user profiles.

Answer: The correct answers are B, C, and D. A is not correct because the My Documents folder is located within a user’s home directory automatically when a home directory is created. Users do not need to go looking for their home directory.

5. What three tasks must you perform to create a home folder on a network server?

Answer: First, create and share a folder in which to store all home folders on a network server. Second, for the shared folder, remove the default Full Control permission from the Everyone group and assign Full Control to the Users group for users that will reside in this shared folder. Third, provide the path to the user’s home folder in the shared home directory folder on the Profile tab of the Properties dialog box for the user account.

Chapter Seven Lesson 5 Review

1. What are groups, and why do you use them?

Answer: A group is a collection of user accounts. A group simplifies administration by allowing you to assign permissions and rights to a group of users rather than to each individual user account.

2. An administrator or owner of a resource uses __________________ to control what users can do with a resource such as a folder, a file, or a printer.

Answer: Permissions

3. You use local groups to assign permissions to resources residing ______________
________________________________________.

On the computer on which the local group is created

4. Which of the following statements about deleting local groups are correct?
(Choose all that apply.)

a. Each group that you create has a unique identifier that cannot be reused.
b. You can restore access to resources by re-creating the group.
c. When you delete a group, you also remove the permissions and rights associated with it.
d. Deleting a group deletes the user accounts that are members of the group.

The correct answers are A and C. B is not correct because re-creating a group does not re-create the membership of that group or any of the rights or permissions associated with that group. D is not correct because deleting a group does not delete the user accounts that are members of the group. Deleting a group does remove any rights and permissions that were extended to the members of the group by virtue of their membership.

5. What is the difference between built-in system groups and built-in local groups found on computers running Windows XP Professional? Give at least two examples of each type of group.

Built-in local groups give rights to perform system tasks on a single computer, such as backing up and restoring files, changing the system time, and administering system resources. Some examples of built-in local groups are Administrators, Backup Operators, Guests, Power Users, Replicator, and Users. Built-in system groups do not have specific memberships that you can modify, but they can represent different users at different times, depending on how a user gains access to a computer or resource. You do not see system groups when you administer groups, but they are available for use when you assign rights and permissions to resources. Some examples of built-in system groups are Everyone, Authenticated Users, Creator Owner, Network, Interactive, Anonymous Logon, and Dialup.

Chapter Eight Lesson 1 Review

1. Which of the following statements correctly describe NTFS file and folder permissions?

Answer: Choose all that apply.

a. NTFS security is effective only when a user gains access to the file or folder over the network.
b. NTFS security is effective when a user gains access to the file or folder on the local computer.
c. NTFS permissions specify which users and groups can gain access to files and folders and what they can do with the contents of the file or folder.
d. NTFS permissions can be used on all file systems available with Windows XP
Professional.

Answer: The correct answers are B and C. NTFS security is locally based and so affects all users accessing a resource, whether those users are logged on locally or accessing the resource from the network. A is not correct because NTFS security does not only apply to network users. D is not correct because NTFS permissions can be used only on partitions formatted with NTFS.

2. Which of the following NTFS folder permissions allow you to delete the folder?
Choose the correct answer.

a. Read
b. Read & Execute
c. Modify
d. Administer

Answer: The correct answer is C. A and B are not correct because these permissions do not allow you to delete a folder. D is not correct because Administer is not a valid permission.

3. Which of the NTFS file permissions should you assign to a file if you want to allow users to delete the file but do not want to allow users to take ownership of a file?

Answer: Modify

4. What is an access control list (ACL), and what is the difference between an ACL and an access control entry (ACE)?

Answer: An ACL, which is stored with every file and folder on an NTFS volume, contains a list of all user accounts or groups that have been assigned permissions to that file or folder. An ACE is an entry in an ACL that contains the operations that a user or group is allowed or specifically denied to perform on that file or folder.

5. What are a user’s effective permissions for a resource?

Answer: A user’s effective permissions for a resource are the sum of the NTFS permissions assigned to the individual user account and to all of the groups to which the user belongs. If there are any Deny permissions set, they override all instances in which that permission is allowed and must be removed from the user’s effective permissions.

6. By default, what inherits the permissions that you assign to the parent folder?

Answer: By default, the permissions that you assign to the parent folder are inherited by and propagated to the subfolders and files that are contained in the parent folder.

Chapter Eight Lesson 2 Review

1. By default, when you format a volume with NTFS, the_____________permission is assigned to the Everyone group. Fill in the blank.

Answer: Full Control

2. When you assign permissions for public data folders, it is recommended that you assign the ________________ permission and the ________________ permission to the Users group, and the ___________ permission to the CREATOR OWNER user. Fill in the blanks.

Answer: Read & Execute; Write; Full Control

3. Which of the following users can assign permissions to user accounts and groups?
Choose all that apply.

a. Administrators
b. Power users
c. Users with the Full Control permission
d. Owners of files and folders

Answer: The correct answers are A, C, and D. B is not correct because members of the Power users group cannot assign permissions.

4. Which of the following tabs in the Properties dialog box for the file or folder do you use to assign or modify NTFS permissions for a file or a folder? Choose the correct answer.

a. Advanced
b. Permissions
c. Security
d. General

Answer: The correct answer is C. A, B, and D are incorrect because you use the Security tab to modify NTFS permissions.

5. What is the purpose of the Traverse Folder/Execute File special permission?

Answer: Traverse Folder allows or denies moving through folders to access other files or folders, even when the user has no permissions for the traversed folder. Execute File allows or denies running executable files (application files).

6. What is the difference between the Delete permission and Delete Subfolder And
Files permission?

Answer: Delete allows or denies the deleting of a file or folder. Even if a user does not have the Delete permission for a file or folder, the user can still delete the file or folder if the Delete Subfolder And Files permission has been granted to the user on the parent folder.

Chapter Eight Lesson 3 Review:

1. Which of the following statements about copying a file or folder are correct?
Choose all that apply.

a. When you copy a file from one folder to another folder on the same volume, the permissions on the file do not change.
b. When you copy a file from a folder on an NTFS volume to a folder on a FAT volume, the permissions on the file do not change.
c. When you copy a file from a folder on an NTFS volume to a folder on another
NTFS volume, the permissions on the file match those of the destination folder. d. When you copy a file from a folder on an NTFS volume to a folder on a FAT volume, the permissions are lost.
Answer: The correct answers are C and D. A is not correct because when you copy a file to a folder on the same volume, the file inherits the permissions assigned to the target folder. B is not correct because when you copy a file to a FAT volume, permissions are lost.

2. Which of the following statements about moving a file or folder are correct?
Choose all answers that are correct.

a. When you move a file from one folder to another folder on the same volume, the permissions on the file do not change.
b. When you move a file from a folder on an NTFS volume to a folder on a FAT volume, the permissions on the file do not change.
c. When you move a file from a folder on an NTFS volume to a folder on another NTFS volume, the permissions on the file match those of the destination folder.
d. When you move a file from a folder on an NTFS volume to a folder on the same volume, the permissions on the file match those of the destination folder.

Answer: The correct answers are A and C. B is not correct because when you move a file to a FAT partition, all permissions are lost. D is not correct because when you move a file to a folder on the same volume, the original permissions are retained.

3. When you assign NTFS permissions you should assign the ________(least/most) restrictive permissions. Fill in the blank.

Answer: Most

4. If you do not want a user or group to gain access to a particular folder or file, should you deny access permissions to that folder or file?

Answer: You should assign permissions to the folder or file rather than deny permission to access the folder or file. Denying permissions should be an exception, not common practice.

Chapter Nine Lesson One Review:

1. Because you use NTFS permissions to specify which users and groups can access files and folders and what these permissions allow users to do with the contents of the file or folder, why do you need to share a folder or use shared folder permissions?

Answer: Although NTFS security is effective whether a user gains access to the file or folder at the computer or over the network, NTFS permissions do not make folders available over the network. Sharing folders is the only way to make folders and their contents available over the network. Shared folder permissions provide another way to secure file resources. They can be used on FAT or FAT32 partitions, as well as NTFS partitions, whereas NTFS permissions are available only on NTFS volumes.

2. Which of the following permissions are shared folder permissions? (Choose all that apply.)

a. Read
b. Write
c. Modify
d. Full Control

Answer: The correct answers are A and D. The available shared folder permissions are Read, Change, and Full Control. B and C are not correct because Write and Modify are not valid shared folder permissions.

3. ______________________ (Denied /Allowed) permissions take precedence over
____________ (denied /allowed) permissions on a shared folder.

Answer: Denied permissions take precedence over allowed permissions on a shared folder.

4. When you copy a shared folder, the original folder is _____________(no longer shared /still shared) and the copy is _______________(not shared /shared).

Answer: When you copy a folder, the original folder is still shared and the copy is not shared.

5. When you move a shared folder, the folder is _________ (no longer shared /still shared).

Answer: When you move a shared folder, the folder is no longer shared.

6. When you rename a shared folder, the folder is ________________ (no longer shared /still shared).

Answer: When you rename a shared folder, the folder is no longer shared.

7. Windows XP Professional automatically shares folders for administrative purposes.
These shares are marked with a __________________, which hides them from users who browse the computer.

Answer: Dollar sign ($)

8. The system root folder, which is C:\Windows by default, is shared as
________. Administrators can access this shared folder to administer Windows
XP Professional without knowing in which folder it is installed. Only members of the Administrators group have access to this share. Windows XP Professional assigns the Full Control permission to the Administrators group.

Answer: Admin$

Chapter Nine Lesson Two Review:

1. If you are using both shared folder and NTFS permissions, the ______________
(least/most) restrictive permission is always the overriding permission.

Answer: Most

2. Which of the following statements about combining shared folder permissions and
NTFS permissions are true? (Choose all that apply.)

a. You can use shared folder permissions on all shared folders.
b. The Change shared folder permission is more restrictive than the Read NTFS permission.
c. You can use NTFS permissions on all shared folders.
d. The Read NTFS permission is more restrictive than the Change shared folder permission.

Answer: The correct answers are A and D. B is not correct because the Read NTFS permission is more restrictive than the Change shared folder permission. C is not correct because you can use NTFS permissions only on volumes formatted with NTFS, whereas you can use shared folder permissions on volumes formatted with NTFS or FAT.

3. Which of the following statements about shared folder permissions and NTFS permissions are true? (Choose all that apply.)

a. NTFS permissions apply only when the resource is accessed over the network.
b. NTFS permissions apply whether the resource is accessed locally or over the network.
c. Shared folder permissions apply only when the resource is accessed over the network.
d. Shared folder permissions apply whether the resource is accessed locally or over the network.

Answer: The correct answers are B and C. A is not correct because NTFS permissions apply whether the resource is accessed locally or over the network. D is not correct because shared folder permissions are applied only when a folder is accessed remotely over the network.

4. If needed, you can apply different _________permissions to each folder, file, and subfolder.

Answer: NTFS