An organization needs to track who is attempting to access sensitive files on a Windows file server. They want to log both successful and failed access attempts to those files. What should the administrator configure?

Enable 'Audit logon events' in Audit Policy and review the Security log for file access entries.

Enable 'Audit process creation' in Audit Policy and review the System log.

Enable 'Audit account management' in Audit Policy and configure SACL on the file server's system drive.

Enable 'Audit object access' in Audit Policy and configure auditing on the sensitive files and folders in their properties.

What is the primary purpose of Windows security policy?

To monitor network traffic and block malicious packets at the firewall

To define and enforce security settings that control authentication, authorization, and auditing on a Windows system

To automatically install software updates and patches on Windows systems

To provide a graphical interface for managing user files and folders

Which Security Options setting would you configure to prevent users from installing device drivers that are not signed by Microsoft?

Network access: Do not allow anonymous enumeration of SAM accounts

Devices: Unsigned driver installation behavior

Devices: Prevent users from installing printer drivers

Devices: Restrict CD-ROM access to locally logged-on user only

What is the purpose of the Account lockout threshold setting in Windows security policy?

To specify the number of failed logon attempts allowed before the account is locked

To set the maximum number of characters in a password

To determine how often users must change their passwords

To define how long a user must wait before changing their password

GIAC Security Essentials

Domain 6Objective 2

Enforcing Windows Security Policy GSEC Practice Questions (Page 5)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

Questions 21–25

21application · medium
An organization needs to track who is attempting to access sensitive files on a Windows file server. They want to log both successful and failed access attempts to those files. What should the administrator configure?
Select an answer first
22foundation · easy
What is the primary purpose of Windows security policy?
Select an answer first
23foundation · easy
Which Security Options setting would you configure to prevent users from installing device drivers that are not signed by Microsoft?
Select an answer first
24foundation · easy
What is the purpose of the Account lockout threshold setting in Windows security policy?
Select an answer first
25foundation · easy
Which of the following is a key component of Windows security policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.