An organization has a GPO that sets 'Minimum password length' to 14 and 'Enforce password history' to 24. The GPO is linked to the domain root. A security audit reveals that some servers in a specific OU have a minimum password length of 8. The administrator confirms the GPO is linked and enabled. What is the most likely cause?

The servers are running an older version of Windows that does not support password length settings.

The GPO is not being replicated to the domain controllers.

The 'Enforce password history' setting of 24 is preventing the password length from applying.

A GPO linked to the specific OU has a conflicting 'Minimum password length' setting that takes precedence.

A company wants to harden its Windows servers by disabling the storage of LAN Manager (LM) hash values in the SAM database. Which security option should be configured?

Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers

Network security: Minimum session security for NTLM SSP based clients

Network security: LAN Manager authentication level

Network security: Do not store LAN Manager hash value on next password change

A company wants to prevent users from connecting to the Windows workstation via the network without a password. Which Security Options setting should be configured?

Set 'Microsoft network server: Digitally sign communications (always)' to Enabled.

Set 'Network access: Do not allow anonymous enumeration of SAM accounts' to Enabled.

Set 'Interactive logon: Require Ctrl+Alt+Del' to Enabled.

Set 'Accounts: Limit local account use of blank passwords to console logon only' to Enabled.

An organization has 500 Windows 10 workstations in an Active Directory domain. They need to enforce a consistent password policy across all workstations. What is the most efficient method to deploy this policy?

Create a Group Policy Object (GPO) with the password policy settings and link it to the OU containing the workstations.

Use a PowerShell script to set the password policy on each workstation at logon.

Manually configure the password policy on each workstation using Local Security Policy.

Configure the password policy in the Default Domain Policy and do nothing else.

Which Security Options setting is used to restrict the use of empty passwords for remote logons?

Accounts: Limit local account use of blank passwords to console logon only

Interactive logon: Do not display last user name

System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing

Network access: Do not allow anonymous enumeration of SAM accounts

GIAC Security Essentials

Domain 6Objective 2

Enforcing Windows Security Policy GSEC Practice Questions (Page 2)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

Questions 6–10

6expert · hard
An organization has a GPO that sets 'Minimum password length' to 14 and 'Enforce password history' to 24. The GPO is linked to the domain root. A security audit reveals that some servers in a specific OU have a minimum password length of 8. The administrator confirms the GPO is linked and enabled. What is the most likely cause?
Select an answer first
7expert · medium
A company wants to harden its Windows servers by disabling the storage of LAN Manager (LM) hash values in the SAM database. Which security option should be configured?
Select an answer first
8application · medium
A company wants to prevent users from connecting to the Windows workstation via the network without a password. Which Security Options setting should be configured?
Select an answer first
9application · medium
An organization has 500 Windows 10 workstations in an Active Directory domain. They need to enforce a consistent password policy across all workstations. What is the most efficient method to deploy this policy?
Select an answer first
10foundation · easy
Which Security Options setting is used to restrict the use of empty passwords for remote logons?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.