Lab 2

2/14/24, 1:19 PM labclient.labondemand.
com/Instructions/ExamResult/6ec36601-5f52-4f27-ad92-0e5d3ed4bfb3
02: Lab 02 - Assisted - Configuring examples of security control types

Security+ (Exam SY0-701)
20/20
Congratulations, you passed!
Duration: 46 minutes, 22 seconds
 Who should have access to a share containing sensitive data like CertEnroll? Score: 1
Everyone
Administrators
Authenticated Users
Only users with a role requirement for such data
Congratulations, you have answered the question correctly.
 Which of the following would be an effective method to directly block access to Rene and Score: 1
other similar users from accessing an admin-only resource?
Create a new domain for non-administrative users

Create the Non-admin group and make all non-admins a member
Set deny Full Control on the Everyone group
Create a clone object and set Deny on the Domain Users group
 check if the Everyone group has access to '\\10.1.16.1\CertEnroll' share Score: 1

Select the Score button to validate this task:
No access for 'Everyone' to SMB Share 'CertEnroll'
Task complete
 confirm if the C:\LABFILES\empty directory was deleted Score: 1

C:\LABFILES\empty deleted ...
Task complete
 The results of the find operation indicate what? Score: 1
Jamie is an administrator
https://labclient.labondemand.com/Instructions/ExamResult/6ec36601-5f52-4f27-ad92-0e5d3ed4bfb3 1/4
2/14/24, 1:19 PM labclient.labondemand.com/Instructions/ExamResult/6ec36601-5f52-4f27-ad92-0e5d3ed4bfb3
Folder deletion is not being audited

Users are unable to access empty folders
User activity is being tracked
 confirm if the C:\LABFILES\pcaps directory was deleted and check for an event log Score: 1
record with an event ID of 4663 and an Object Name of C:\LABFILES\
C:\LABFILES\pcaps deleted ...
Event log record found with ID 4663 and Object Name C:\LABFILES\pcaps
Task complete
 What is the purpose of a detective control? Score: 1
Deny access to an object

Notify subjects about system policies
Inform users of the proper steps to perform an activity
Create a record of events and activities
 confirm the existence of LegalNoticeCaption and LegalNoticeText registry keys with Score: 1
non-zero values $result = $False
Registry keys LegalNoticeCaption and LegalNoticeText exist
Task complete
 What is the goal of directive controls? Score: 1
Defense
Compliance
Prohibition
Tracking
 What are the dual purposes of corrective controls? (Select two) Score: 1
Address an unwanted or less secure state or event

Record evidence of user and event activities
Return the system to a normal and generally secure condition
Provide guidance on proper user behavior
 confirm if the notes.txt file exists and contains "This is important" Score: 1
File C:\Users\jaime\notes.txt exists and contains 'This is important'
Task complete
 confirm if C:\Users\jaime\hash.txt exists and is not empty Score: 1

File C:\Users\jaime\hash.txt exists
Task complete
 confirm if the calchash.ps1 file exists and contains the "Get-FileHash" command Score: 1
File C:\Users\jaime\calchash.ps1 exists and contains the 'Get-FileHash' command
Task complete
 confirm if the check.ps1 file exists and contains the "Get-Content" cmdlet Score: 1
File C:\Users\jaime\check.ps1 exists and contains the 'Get-Content' cmdlet
Task complete
 What is the typical means (which was used in this exercise) to detect changes in a file? Score: 1
encryption
authentication
authorization
hashing
 What is the primary purpose of preventive controls? Score: 1
Stop unwanted activity from succeeding

Record information about activities
Give instructions
Restore a system back to preferred condition
Persuade a perpetrator to go elsewhere
Compensate for a failed control
 What is the primary purpose of detective controls? Score: 1

Give instructions
 What is the primary purpose of directive controls? Score: 1

Give instructions
 What is the primary purpose of corrective controls? Score: 1

Give instructions
 What is the purpose of the dot and slash in front of the filenames in the PowerShell Score: 1
scripts and when executing PowerShell scripts?
Allow for administrator execution

Reference the current working directory
To set the security content of the process
For avoiding detection by an IDS

Lab 2

Uploaded by

Copyright:

Available Formats

Lab 2

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Lab 2

Uploaded by

Copyright:

Available Formats

2/14/24, 1:19 PM labclient.labondemand.

02: Lab 02 - Assisted - Configuring examples of security control types

Congratulations, you have answered the question correctly.

Create a new domain for non-administrative users

Congratulations, you have answered the question correctly.

 check if the Everyone group has access to '\\10.1.16.1\CertEnroll' share Score: 1

 confirm if the C:\LABFILES\empty directory was deleted Score: 1

 The results of the find operation indicate what? Score: 1

Folder deletion is not being audited

Congratulations, you have answered the question correctly.

 What is the purpose of a detective control? Score: 1

Deny access to an object

Congratulations, you have answered the question correctly.

 What is the goal of directive controls? Score: 1

Address an unwanted or less secure state or event

 confirm if C:\Users\jaime\hash.txt exists and is not empty Score: 1

Congratulations, you have answered the question correctly.

 What is the primary purpose of preventive controls? Score: 1

Stop unwanted activity from succeeding

 What is the primary purpose of detective controls? Score: 1

Stop unwanted activity from succeeding

Congratulations, you have answered the question correctly.

 What is the primary purpose of directive controls? Score: 1

Stop unwanted activity from succeeding

 What is the primary purpose of corrective controls? Score: 1

Stop unwanted activity from succeeding

Congratulations, you have answered the question correctly.

Allow for administrator execution

Congratulations, you have answered the question correctly.

You might also like