A company's security policy requires that passwords contain at least one uppercase letter, one lowercase letter, one digit, and one special character. Which Windows Account Policy setting enforces this requirement?

Set 'Enforce password history' to 5.

Set 'Maximum password age' to 90 days.

Set 'Minimum password length' to 8.

Enable 'Password must meet complexity requirements'.

Which tool is used to edit Group Policy objects (GPOs) for an Active Directory domain?

Active Directory Users and Computers (dsa.msc)

Computer Management (compmgmt.msc)

Local Security Policy (secpol.msc)

Group Policy Management Console (GPMC)

Which of the following best describes the scope of Windows security policy?

It can be applied to individual users, groups, and computers through local or domain-based Group Policy

It only controls settings related to network protocols and IPsec

It applies only to the local computer where the policy is configured

It is limited to settings that affect only the operating system kernel

A security administrator wants to harden Windows workstations against network-based attacks by disabling the use of SMBv1 and requiring SMB signing. Which Security Options settings should be configured?

Set 'Domain member: Digitally encrypt or sign secure channel data (always)' to Enabled.

Set 'Network access: Do not allow anonymous enumeration of SAM accounts' to Enabled.

Set 'Microsoft network server: Digitally sign communications (always)' to Enabled and disable SMBv1 via Windows Features or registry.

Set 'Microsoft network client: Send unencrypted password to third-party SMB servers' to Enabled.

Which component of Windows security policy is responsible for defining which users can perform specific system tasks, such as shutting down the system or changing the system time?

Windows Firewall with Advanced Security

GIAC Security Essentials

Domain 6Objective 2

Enforcing Windows Security Policy GSEC Practice Questions (Page 6)

Part of the Data Protection and Emerging Technologies domain, which makes up ~12% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~11–19 in this domain), expect 4–6 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

Questions 26–30

26application · medium
A company's security policy requires that passwords contain at least one uppercase letter, one lowercase letter, one digit, and one special character. Which Windows Account Policy setting enforces this requirement?
Select an answer first
27foundation · easy
Which tool is used to edit Group Policy objects (GPOs) for an Active Directory domain?
Select an answer first
28foundation · easy
Which of the following best describes the scope of Windows security policy?
Select an answer first
29application · medium
A security administrator wants to harden Windows workstations against network-based attacks by disabling the use of SMBv1 and requiring SMB signing. Which Security Options settings should be configured?
Select an answer first
30foundation · easy
Which component of Windows security policy is responsible for defining which users can perform specific system tasks, such as shutting down the system or changing the system time?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.