Lesson 15 Quiz_ ITMT-2371-H71 - Lesson15Quiz:ITMT2371H71...

This preview shows page 1 out of 8 pages.

Unformatted text preview: 11/19/2016 Lesson 15 Quiz: ITMT­2371­H71 Lesson 15 Quiz Due Nov 21 at 11:30pm Points 10 Questions 20 Time Limit None Allowed Attempts 3 Available Oct 17 at 8am ­ Dec 7 at 11:30pm about 2 months Take the Quiz Again Attempt History LATEST Attempt Time Score Attempt 1 7 minutes 10 out of 10 Correct answers are hidden. Score for this attempt: 10 out of 10 Submitted Nov 19 at 11pm This attempt took 7 minutes. Question 1 0.5 / 0.5 pts What is the default authentication protocol for non­domain computers? Kerberos NTLM CHAP PAP Question 2 0.5 / 0.5 pts What does the acronym NTLM stand for? NT Link Manager NT LAN Manager NT Link Messenger 1/8 11/19/2016 Lesson 15 Quiz: ITMT­2371­H71 NT LAN Messenger Question 3 0.5 / 0.5 pts NTLM uses a challenge­response mechanism for authentication without doing what? revealing the protocol to the server revealing the client’s operating system to the server sending an encrypt/decrypt message to the server sending a password to the server Question 4 0.5 / 0.5 pts What type of protocol is Kerberos? a uni­directional authentication protocol a simple Microsoft­only protocol a certificate­based authentication protocol a secure network authentication protocol Question 5 0.5 / 0.5 pts Kerberos security and authentication are based on what type of technology? secure transmission legacy code secret key 2/8 11/19/2016 Lesson 15 Quiz: ITMT­2371­H71 challenge­response Question 6 0.5 / 0.5 pts What is the default maximum allowable time lapse between domain controllers and client systems for Kerberos to work correctly? 5 minutes 45 minutes 1 minute 15 minutes Question 7 0.5 / 0.5 pts Which three components make up a service principal name (SPN)? service name, host name, and IP address service name, URL, and host name service name, IP address, and port number service class, host name, and port number Question 8 0.5 / 0.5 pts What happens if a client submits a service ticket request for an SPN that does not exist in the identity store? The client receives an access denied error An event is written to the Kerberos server’s event log 3/8 11/19/2016 Lesson 15 Quiz: ITMT­2371­H71 The Kerberos server receives an access denied error The Kerberos ticket for that service is destroyed Question 9 0.5 / 0.5 pts Which tool can you use to add SPNs to an account? ADSI Edit Notepad Microsoft Word LDAP Question 10 0.5 / 0.5 pts Identify another utility that you can use to add SPNs to an account. spnedit netsh dnscmd setspn Question 11 0.5 / 0.5 pts What type of account is an account under which an operating system, process, or service runs? system user 4/8 11/19/2016 Lesson 15 Quiz: ITMT­2371­H71 service network Question 12 0.5 / 0.5 pts By default, which service accounts will the Windows PowerShell cmdlets manage? standalone MSAs domain user accounts designated as service accounts group MSAs standard local service accounts Question 13 0.5 / 0.5 pts What is the default authentication protocol for contemporary domain computers? NTLM Kerberos CHAP PAP Question 14 0.5 / 0.5 pts What is the name by which a client uniquely identifies an instance of a service? service principal name 5/8 11/19/2016 Lesson 15 Quiz: ITMT­2371­H71 service provider name service account name service instance name Question 15 0.5 / 0.5 pts Before you can create an MSA object type, you must create what? a key services MSA group a key services MSA distributed domain account a key distribution services Master MSA a key distribution services root key Question 16 0.5 / 0.5 pts What service right does an MSA account automatically receive upon creation? domain power user log on interactively log on as a service domain administrator Question 17 0.5 / 0.5 pts Which Kerberos setting defines the maximum time skew that can be tolerated between a ticket’s timestamp and the current time at the KDC? 6/8 11/19/2016 Lesson 15 Quiz: ITMT­2371­H71 maximum tolerance for computer clock synchronization maximum lifetime for service ticket maximum lifetime for user ticket renewal maximum lifetime for user ticket Question 18 0.5 / 0.5 pts Which Kerberos setting defines the maximum lifetime ticket for a Kerberos TGT ticket? maximum lifetime for user ticket renewal maximum lifetime for user ticket maximum lifetime for service ticket maximum tolerance for computer clock synchronization Question 19 0.5 / 0.5 pts Which Kerberos setting defines the maximum lifetime of a Kerberos ticket? maximum tolerance for computer clock synchronization maximum lifetime for service ticket maximum lifetime for user ticket maximum lifetime for user ticket renewal Question 20 0.5 / 0.5 pts Which Kerberos setting defines how long a service or user ticket can be renewed? 7/8 11/19/2016 Lesson 15 Quiz: ITMT­2371­H71 maximum tolerance for computer clock synchronization maximum lifetime for user ticket maximum lifetime for user ticket renewal maximum lifetime for service ticket Quiz Score: 10 out of 10 8/8 ...
View Full Document

  • Left Quote Icon

    Student Picture

  • Left Quote Icon

    Student Picture

  • Left Quote Icon

    Student Picture