Chap 17: Securing and Sharing Windows Resources

What setting makes you input a password to boot the computer or enter BIOS/UEFI?

What setting makes you input a password to boot the computer or enter BIOS/UEFI?

BIOS/UEFI Password

What sign-in settings does Windows Hello allow you to choose?

Face, Iris, Fingerprint, PIN and SSO

What are the three Local Group Policy editors?

Group policy
Local Group policy
Local Security policy

What is data at rest and data in motion?

Data at rest is data that is being stored
Data in motion is data that is being moved

What is EFS and what is it used for?

Encrypting File System can be used to encrypt files and folders at rest in Windows

What’s the difference between privileges and permissions?

Privileges are refer to what an account is allowed to do in the system
Permissions refer to what users or user groups are allowed access to certain data

What are the four built-in user groups?

Admin, Users, Guest, and Power Users

Should you assign permissions and privileges to every individual account?

No, assign multiple users to one group and apply permissions and privileges to the whole group

What are the two methods of assigning folder and file permissions on Windows

Workgroup sharing and Domain controlling

What’s the difference between Workgroup sharing and Domain controlling?

Workgroup sharing is set up on each local system
Domain controlling is controlled by a network admin for all systems

What are the two ways to share folders/files over a network?

Share permissions and NTFS permissions

What is a mapped drive?

A mapped drive is a network attached HD that can be accessed by other computers on the network

What can you add to a shared folder name to hide it from other users?

$

What can you use to encrypt an entire drive?

Bitlocker

What can you use to encrypt a flash drive or removable device?

Bitlocker to go

What are inherited permissions?

Inherited permissions are inherited from a parent folder

What are Explicit permissions?

These permissions apply when a file/folder is moved on the same volume, but not when moved between volumes

What are local shares?

Local shares are files/folders that are shared between other users across a network

What are administrative shares?

These are files/folders that are shared with all admins at the domain level

What are the two types of administrative shares?

%systemroot% and any drive or volume

In what order are policies applied? What is the acronym

Local, Site, Domain, OU, Enforced. LSDOE

What policy wins if certain ones conflict?

The last one applied.