OPS-1 through OPS-10, OS-2, OS-3 went from 5 → 15. OS-1, OS-4 through OS-11, SEC-1 through SEC-11, TRB-1 through TRB-4 went from 7 → 15. Questions cover exam-weight scenarios not duplicated from original content. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
132 lines
2.8 KiB
Markdown
132 lines
2.8 KiB
Markdown
# SEC-2 Quiz: Windows Security Settings
|
|
|
|
Take this after studying `notes/SEC-2-windows-security-settings.md`.
|
|
|
|
Reply with answers like:
|
|
`1B 2A 3D 4C 5B 6A 7D`
|
|
|
|
## Questions
|
|
|
|
1. Which Windows feature provides built-in antivirus protection?
|
|
|
|
A. Disk Management
|
|
B. Microsoft Defender Antivirus
|
|
C. File Explorer Options
|
|
D. APIPA
|
|
|
|
2. Which permission type applies locally and over the network on an NTFS volume?
|
|
|
|
A. Share permissions
|
|
B. Public profile
|
|
C. SSID permissions
|
|
D. NTFS permissions
|
|
|
|
3. Which Windows feature encrypts an entire volume?
|
|
|
|
A. BitLocker
|
|
B. EFS
|
|
C. SAML
|
|
D. DLP
|
|
|
|
4. Which Windows feature encrypts individual files or folders on NTFS?
|
|
|
|
A. BitLocker To Go
|
|
B. UAC
|
|
C. EFS
|
|
D. Group Policy
|
|
|
|
5. What does UAC help prevent?
|
|
|
|
A. DHCP address assignment
|
|
B. Silent or automatic administrative changes without approval
|
|
C. DNS name resolution
|
|
D. File synchronization
|
|
|
|
6. Which command forces Group Policy to refresh?
|
|
|
|
A. `gpresult /r`
|
|
B. `whoami /groups`
|
|
C. `manage-bde -status`
|
|
D. `gpupdate /force`
|
|
|
|
7. Which account type is centrally managed by Active Directory?
|
|
|
|
A. Local account
|
|
B. Microsoft account
|
|
C. Domain account
|
|
D. Guest-only account
|
|
|
|
8. BitLocker prompts for a recovery key at boot. What likely changed?
|
|
|
|
A. The screensaver activated
|
|
B. Hardware or firmware changes detected by TPM
|
|
C. The monitor refresh rate changed
|
|
D. Windows Update failed
|
|
|
|
9. Which Windows command shows the current user's security group memberships?
|
|
|
|
A. `hostname`
|
|
B. `winver`
|
|
C. `whoami /groups`
|
|
D. `sfc /scannow`
|
|
|
|
10. Which Windows feature provides a software firewall between the network and the OS?
|
|
|
|
A. EFS
|
|
B. Windows Defender Firewall
|
|
C. UAC
|
|
D. BitLocker
|
|
|
|
11. Which built-in account has the highest level of privileges on a standalone Windows machine?
|
|
|
|
A. Standard user
|
|
B. Guest
|
|
C. Power user
|
|
D. Local Administrator
|
|
|
|
12. Which Windows Security feature scans files in real time to detect malware?
|
|
|
|
A. BitLocker
|
|
B. EFS
|
|
C. UAC
|
|
D. Microsoft Defender real-time protection
|
|
|
|
13. A file on an NTFS drive is encrypted with EFS. Who can open it?
|
|
|
|
A. Anyone on the local network
|
|
B. Only the user account that encrypted it (and authorized recovery agents)
|
|
C. All administrators automatically
|
|
D. Any user with read share permission
|
|
|
|
14. A user needs to share a folder so everyone can read but only IT can write. Which permission type controls write access on an NTFS volume?
|
|
|
|
A. DNS settings
|
|
B. Power profile
|
|
C. NTFS permissions
|
|
D. Wi-Fi SSID
|
|
|
|
15. Which Windows feature manages encryption keys and can be backed up to Active Directory?
|
|
|
|
A. EFS only
|
|
B. UAC
|
|
C. BitLocker with TPM and recovery key backup
|
|
D. Windows Firewall
|
|
|
|
## Answer Key For Instructor
|
|
|
|
1. B
|
|
2. D
|
|
3. A
|
|
4. C
|
|
5. B
|
|
6. D
|
|
7. C
|
|
8. B
|
|
9. C
|
|
10. B
|
|
11. D
|
|
12. D
|
|
13. B
|
|
14. C
|
|
15. C
|
|
|