Enforcing Windows Security Policy GSEC Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   Which command-line tool is used to refresh Group Policy settings immediately on a Windows computer?

   • Agpupdate /force
   • Bnet stop policyagent
   • Csecedit /refreshpolicy
   • Dgpresult /r
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   After applying a GPO that enables 'Audit object access' and configures a SACL on a sensitive folder, the administrator notices that no audit events are being generated when users access files in that folder. The GPO is applied and the audit policy is enabled. What is the most likely reason for the missing audit events?

   • AThe SACL was configured on the folder but not on the files within it, and the 'Replace all child object auditing entries' option was not selected.
   • BThe 'Audit object access' setting only audits failed access attempts, not successful ones.
   • CThe Security log is full and cannot write new events.
   • DThe GPO must be reapplied with 'gpupdate /force' after configuring the SACL.
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   A company requires all user passwords to be at least 12 characters and changed every 90 days. They also want to prevent users from reusing their previous 5 passwords. Which Windows security policy setting should the administrator configure to enforce these requirements?

   • AAssign the 'Change password' user right to all users in Local Policies.
   • BConfigure 'Account lockout threshold' to 5 and 'Account lockout duration' to 90 minutes in Account Policies.
   • CSet 'Enforce password history' to 5, 'Maximum password age' to 90, and 'Minimum password length' to 12 in Account Policies.
   • DSet 'Password must meet complexity requirements' to Enabled and 'Minimum password age' to 90 in Account Policies.
   Reveal Solution Discussion Select an answer first