Copyright © 2014 by Jones & Bartlett Learning, LLC, an Ascend .docx

Copyright © 2014 by Jones & Bartlett Learning, LLC, an
Ascend Learning Company. All rights reserved.
www.jblearning.com Student Lab Manual
Assessment Worksheet
Creating a Scheduled Backup and Replicating System Folders
Course Name and Number:
_____________________________________________________
Student Name:
_____________________________________________________
___________
Instructor Name:
_____________________________________________________
_________
Lab Due Date:
_____________________________________________________
___________
Overview
In this lab, you installed the Windows Distributed File System
and Windows Server
Backup features from the PowerShell command line. You
scheduled a daily backup of

the C:ERPdocuments folder on the TargetWindows01 server
and replicated this backup
to the TargetWindows02 server using the DFS Replication
feature.
Lab Assessment Questions & Answers
1. What is the difference between roles and features in Windows
Server 2008?
2. What is installed when you choose the RSAT-DFS-MGMT-
Con feature?
3. How often should servers be backed up?
4. What are the different types of data backup that are
performed?

5. What is the command to create a share?
6. What is a differential backup?
Course Name and Number: Student Name: Instructor Name: Lab
Due Date: Text112: Text113: Text114: Text115: Text116:
Text117:
Managing Group Policy Within the Microsoft Windows
Environment
_____________________________________________________
Student Name:
_____________________________________________________
___________

Instructor Name:
_____________________________________________________
_________
Lab Due Date:
_____________________________________________________
___________
Overview
In this lab, you created and linked Active Directory Group
Policy Objects (GPO) to
domain computers and used the Group Policy Manager Console
(GPMC) to deploy
security policies across the domain. You also generated policy
audit reports from the
GPMC and the Windows Command Prompt to analyze the
existence of and effectiveness
of the GPO.
1. Is using the option to Store passwords using reversible
encryption a good security
practice? Why or why not?
2. Compare the GPO Report and the RSOP Report.

3. How often are GPO changes applied? Must the user be logged
off the system?
4. Which GPO policy takes precedence in the case of a policy
conflict? Why?
5. What is the value of the Group Policy in an enterprise
environment?
6. What are some of the reasons that an organization would need
to document their
existing GPO settings?

Due Date: Text106: Text107: Text108: Text109: Text110:
Text111:
Identifying and Removing Malware from Windows Systems
_____________________________________________________
Student Name:
_____________________________________________________
___________
Instructor Name:
_____________________________________________________
_________
Lab Due Date:
_____________________________________________________
___________
Overview
In this lab, you used AVG Business Edition, an antivirus and

anti-malware software tool,
to identify malware and malicious software from an infected
Windows 2012 workstation.
You researched remediations for the malware identified by the
scan, and took actions to
remove those programs. You also used Windows Defender to
perform the same actions
on a Windows 2008 workstation.
1. What is the one thing that a virus, a worm, spyware, and
malicious code have in
common? What are the differences among these three threats: a
virus, a worm,
and spyware?
2. How often should you update your antivirus protection?
3. Why is it a best practice to have and to carry an antivirus
boot-up disk or CD?
4. In a corporate environment, should new antivirus definitions
be installed as soon
as they are available?

5. Is the manual quick scan good enough protection for a
system?
6. What best practices for the workstation domain that can
mitigate the risks and
threats caused by malicious code?
7. If you have an up-to-date antivirus program, do you still need
a malware detection
program like Windows Defender?
8. What are some of the most common symptoms of malware?
9. What risk or threat do malware applications, such as spyware,
pose to the
workstation domain?

Due Date: Text97: Text98: Text99: Text100: Text101: Text102:
Text103: Text104: Text105:
Configuring BitLocker and Windows Encryption
_____________________________________________________
Student Name:
_____________________________________________________
___________
Instructor Name:
_____________________________________________________
_________
Lab Due Date:
_____________________________________________________
___________
Overview
In this lab, you used the Microsoft Encrypting File System
(EFS) to encrypt files and

folders on a Windows Server 2012 machine. You documented
the success or failure of
your encryption efforts. You also installed Microsoft BitLocker
Drive Encryption, a data
protection feature that is used to resist data theft and the risk of
exposure from lost,
stolen, or decommissioned computers. You encrypted a data
drive on the remote server
and decrypted it using a recovery key.
1. Within a Microsoft Windows Server 2012 environment, who
has access rights to
the EFS features and functions in the server?
2. What are some best practices you can implement when
encrypting BitLocker
drives and the use of BitLocker recovery passwords?
3. What was the recovery key generated by BitLocker in this
lab?
4. How would you grant additional users access rights to your
EFS encrypted folders
and data files?

5. What are the main differences between EFS and BitLocker?
6. The customer privacy data policy in your company’s data
classification standard
requires encryption in two places: data stored locally or on a
LAN, and data
stored on a laptop. Describe your solution for meeting this
policy requirement.
Using Access Control Lists to Modify File System Permissions

on Windows Systems
_____________________________________________________
Student Name:
_____________________________________________________
___________
Instructor Name:
_____________________________________________________
_________
Lab Due Date:
_____________________________________________________
___________
Overview
In this lab, you used the Windows command-line utility,
icacls.exe, to establish file-level
permissions following a set of access control requirements. You
tested those permissions
by remotely accessing the Windows server and attempting to
modify files in the secured
folders. You used screen captures to document that the access
control changes you made
in this lab were properly applied.
1. What is the principle of least privilege?

2. What does ACL stand for and how it is used?
3. Why would you add permissions to a group instead of the
individual?
4. List at least three different types of access control
permissions you can enable for
a file using icacls.exe.
5. Which access control permissions allow you to change files
and/or folders?
6. If you don’t remember the syntax when using icacls.exe, what
command do you
type to see the options?

7. Without using the icacls.exe tool, how could you view and
modify the privileges
of the files or folders of a shared drive?
8. Where do permissions modified using the icacls.exe tool
appear in the folder
Properties?
Text89: Text90:
Implementing Access Controls with Windows Active Directory
_____________________________________________________
Student Name:
_____________________________________________________
___________

Instructor Name:
_____________________________________________________
_________
Lab Due Date:
_____________________________________________________
___________
Overview
In this lab, you used the Active Directory Domain Controller to
secure the C-I-A triad,
ensuring confidentiality and integrity of network data. You
created users and global
security groups and assigned the new users to security groups.
You followed a given set
of access control criteria to ensure authentication on the remote
server by applying the
new security groups to a set of nested folders. Finally, you
verified that authentication by
using the new user accounts to access the secured folders on the
remote server.
1. Relate how Windows Server 2012 Active Directory and the
configuration of
access controls achieve C-I-A for departmental LANs,
departmental folders, and
data.

2. Is it a good practice to include the account or user name in
the password? Why or
why not?
3. What are some of the best practices to enhance the strength
of user passwords in
order to maximize confidentiality?
4. Can a user who is defined in Active Directory access a shared
drive on a
computer if the server with the shared drive is not part of the
domain?
5. Does Windows Server 2012 R2 require a user’s
logon/password credentials prior
to accessing shared drives?
6. When granting access to network systems for guests (i.e.,
auditors, consultants,

third-party individuals, etc.), what security controls do you
recommend
implementing to maximize CIA of production systems and data?
7. In the Access Controls Criteria table, what sharing changes
were made to the
MGRfiles folder on TargetWindows01-DC server?
were made on the
TargetWindows01-DC server to allow Shopfloor users to
read/write files in the
C:LabDocumentsSFfiles folder?
were made on the
TargetWindows01-DC server to allow HumanResources users to
read/write files
in the C:LabDocumentsHRfiles folder?
10. Explain how C-I-A can be achieved down to the folder and
data file access level
for departments and users using Active Directory and Windows
Server 2012 R2
access control configurations. Configuring unique access
controls for different

user types is an example of which kind of access controls?
Text79: Text80: Text81: Text82:

Copyright © 2014 by Jones & Bartlett Learning, LLC, an Ascend .docx

Recommended

Recommended

More Related Content

Similar to Copyright © 2014 by Jones & Bartlett Learning, LLC, an Ascend .docx

Similar to Copyright © 2014 by Jones & Bartlett Learning, LLC, an Ascend .docx (20)

More from vanesaburnand

More from vanesaburnand (20)

Recently uploaded

Recently uploaded (20)

Copyright © 2014 by Jones & Bartlett Learning, LLC, an Ascend .docx