An administrator suspects that an unauthorized user has been trying to log on to a Windows server. The administrator wants to find evidence of these attempts. What should the administrator do?

Review the Application log for antivirus alerts.

Disable the firewall to allow all traffic and monitor the network.

Check the System log for application errors.

Enable auditing of logon events and review the Security log in Event Viewer.

A company wants to enforce a password policy that requires all users to change their passwords every 60 days and use at least 10 characters. Which tool should the administrator use in a Windows domain?

Group Policy Management Console (GPMC) to configure a domain Group Policy Object (GPO)

Local Security Policy on each workstation

Windows Defender Firewall with Advanced Security

A user in a company has been promoted and now needs to access a shared folder that is restricted to managers. The user's account is a standard user account. What is the best way to grant access?

Copy the files to the user's local drive.

Change the user's account to an administrator account.

Give the user's individual account Full Control on the folder.

Add the user to the Managers group in Active Directory.

A Windows 10 workstation is used only for word processing and email. The administrator notices that several unnecessary services are running, and the firewall is disabled. What is the most effective way to reduce the attack surface while maintaining required functionality?

Leave services as they are and only enable the firewall.

Disable unnecessary services, enable the Windows Defender Firewall, and apply a hardened security baseline via Group Policy.

Enable the firewall and set all services to start automatically.

Disable all services and enable the firewall.

Which of the following is a common threat to operating systems?

Malware such as viruses and ransomware

EC-CouncilCertified Secure Computer User

Domain 1Objective 2

Securing Operating Systems CSCU Practice Questions (Page 9)

Part of the Data and Operating System Security domain, which makes up ~25% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 4–7 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

12concepts

Questions 41–45

41application · medium
An administrator suspects that an unauthorized user has been trying to log on to a Windows server. The administrator wants to find evidence of these attempts. What should the administrator do?
Select an answer first
42application · medium
A company wants to enforce a password policy that requires all users to change their passwords every 60 days and use at least 10 characters. Which tool should the administrator use in a Windows domain?
Select an answer first
43expert · medium
A user in a company has been promoted and now needs to access a shared folder that is restricted to managers. The user's account is a standard user account. What is the best way to grant access?
Select an answer first
44application · medium
A Windows 10 workstation is used only for word processing and email. The administrator notices that several unnecessary services are running, and the firewall is disabled. What is the most effective way to reduce the attack surface while maintaining required functionality?
Select an answer first
45foundation · easy
Which of the following is a common threat to operating systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.