Enforcing Windows Security Policy GSEC Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security administrator needs to track who is attempting to access a sensitive file share on a Windows server. The administrator enables 'Audit object access' in the Local Security Policy and configures the appropriate SACL on the folder. After a test access, the Security log shows no audit events. What is the most likely reason?

   • AThe file share is on an NTFS volume that does not support auditing.
   • BThe audit policy is set to 'No auditing' for the 'Audit object access' subcategory.
   • CThe audit policy was applied via Group Policy but the server has not been rebooted.
   • DThe user performing the test access is a member of the local Administrators group.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In Windows security policy, which setting is used to control which users or groups have the right to log on locally to a system?

   • AUser Rights Assignment
   • BAudit Policy
   • CAccount Lockout Policy
   • DSecurity Options
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company requires all user passwords to be at least 14 characters and changed every 90 days. The security team has configured these settings in the Default Domain Policy. After running gpupdate /force on a test workstation, the password policy settings still show the previous values. What is the most likely cause?

   • AThe workstation is not connected to the corporate network and cannot reach a domain controller.
   • BThe workstation needs to be rebooted before the new password policy can take effect.
   • CPassword policy settings are only applied at the local security policy level, not through domain Group Policy.
   • DThe password policy was configured in the Default Domain Controllers Policy instead of the Default Domain Policy.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company wants to prevent users from seeing the last logged-on username on the Windows logon screen. Which security option should be configured?

   • AInteractive logon: Message text for users attempting to log on
   • BInteractive logon: Do not display last user name
   • CInteractive logon: Prompt user to change password before expiration
   • DInteractive logon: Require Ctrl+Alt+Del
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security team has deployed a GPO that assigns the 'Log on as a service' user right to a specific service account. After applying the GPO, the service still fails to start with an 'Access is denied' error. What is the most likely cause?

   • AThe GPO has been configured with 'Security Filtering' to apply only to the service account, not the computer.
   • BThe GPO is linked to an OU that does not contain the computer account of the server where the service runs.
   • CThe service account is a member of the local Administrators group, which overrides the user right.
   • DThe service account password was changed after the GPO was applied.
   Reveal Solution Discussion Select an answer first