# SEC-2 Quiz: Windows Security Settings

Take this after studying `notes/SEC-2-windows-security-settings.md`.

Reply with answers like:
`1B 2A 3D 4C 5B 6A 7D`

## Questions

1. Which Windows feature provides built-in antivirus protection?

A. Disk Management  
B. Microsoft Defender Antivirus  
C. File Explorer Options  
D. APIPA  

2. Which permission type applies locally and over the network on an NTFS volume?

A. Share permissions  
B. Public profile  
C. SSID permissions  
D. NTFS permissions  

3. Which Windows feature encrypts an entire volume?

A. BitLocker  
B. EFS  
C. SAML  
D. DLP  

4. Which Windows feature encrypts individual files or folders on NTFS?

A. BitLocker To Go  
B. UAC  
C. EFS  
D. Group Policy  

5. What does UAC help prevent?

A. DHCP address assignment  
B. Silent or automatic administrative changes without approval  
C. DNS name resolution  
D. File synchronization  

6. Which command forces Group Policy to refresh?

A. `gpresult /r`  
B. `whoami /groups`  
C. `manage-bde -status`  
D. `gpupdate /force`  

7. Which account type is centrally managed by Active Directory?

A. Local account  
B. Microsoft account  
C. Domain account  
D. Guest-only account  

8. BitLocker prompts for a recovery key at boot. What likely changed?

A. The screensaver activated  
B. Hardware or firmware changes detected by TPM  
C. The monitor refresh rate changed  
D. Windows Update failed  

9. Which Windows command shows the current user's security group memberships?

A. `hostname`  
B. `winver`  
C. `whoami /groups`  
D. `sfc /scannow`  

10. Which Windows feature provides a software firewall between the network and the OS?

A. EFS  
B. Windows Defender Firewall  
C. UAC  
D. BitLocker  

11. Which built-in account has the highest level of privileges on a standalone Windows machine?

A. Standard user  
B. Guest  
C. Power user  
D. Local Administrator  

12. Which Windows Security feature scans files in real time to detect malware?

A. BitLocker  
B. EFS  
C. UAC  
D. Microsoft Defender real-time protection  

13. A file on an NTFS drive is encrypted with EFS. Who can open it?

A. Anyone on the local network  
B. Only the user account that encrypted it (and authorized recovery agents)  
C. All administrators automatically  
D. Any user with read share permission  

14. A user needs to share a folder so everyone can read but only IT can write. Which permission type controls write access on an NTFS volume?

A. DNS settings  
B. Power profile  
C. NTFS permissions  
D. Wi-Fi SSID  

15. Which Windows feature manages encryption keys and can be backed up to Active Directory?

A. EFS only  
B. UAC  
C. BitLocker with TPM and recovery key backup  
D. Windows Firewall  

## Answer Key For Instructor

1. B
2. D
3. A
4. C
5. B
6. D
7. C
8. B
9. C
10. B
11. D
12. D
13. B
14. C
15. C