System administration
1. How can you tell which of the policies in the Security Options folder have changed settings in the Default Domain Policy GPO?
By selecting the Default Domain Policy GPO in the Group Policy Management console and clicking the Settings tab and the Show All link, the policies configured in the GPO appear with their settings.
2. Why is it necessary for the Revised Options GPO to appear first in the list?
The Revised Options GPO must be first in the list so that its settings will take precedence over those in the Default Domain Policy GPO. If this was not the case, then the Network Security: Force logoff when logon hours expire policy would retain its original, disabled value, instead of being enabled.
3. Why, in this case, is the auditing of event failures more useful than the auditing of successes?
When auditing logon events, success is the normal result. A long string of successes indicates that everything is proceeding correctly. A string of logon failures, however, could indicate that someone is attempting to penetrate security by guessing passwords. Auditing failures is, therefore, a more critical indication of trouble.
4. Why is it prudent to limit the event log size when using auditing.
Some types of auditing can generate a large amount of event log data, and limiting the maximum size of the log can prevent the system from being overwhelmed.
5. Why is it necessary to clear the cache before you retest the web server connections?
If the web server home pages are cached during the next test, the browser will appear to connect to the websites successfully, even if it does not.
6. Why can you not simply leave Windows Firewall turned off when you deploy an actual web server?
Turning off the firewall on a computer that is accessible from the Internet would leave it open to intrusion by attackers.