TABLE OF CONTENTS A Quick Answer Key follows the Self Test questions. For complete questions, answers, and explanations to the Self Test questions in this chapter as well as the other chapters in this book, see the Self Test Appendix.
| 1. | Your Yellow.labs.dogs.com Information Assurance department has just used John the Ripper, a password-cracking program, against your Active Directory user accounts. They report that 40 percent of your passwords were compromised within an eight-hour period. After some research, you determine that removing the LM authentication for down-level clients will make password guessing much more difficult. Further, you decide to require Kerberos authentication at all of your DCs. After some telephone calls, you assure your manager and CIO that all computers in all domains within your forest are loaded with Windows 2000, 2003, or XP. No legacy workstations are present that require backward LM or NTLM compatibility. With their permission, you apply the security setting using Group Policy. Almost immediately, authentication fails between Fish.com and the Yellow.labs.dogs.com domain, although ping still works. Previously, all users in both domains had complete access to all resources in the two domains, but now every authenticated access fails. Refer to Figure 4.56. Why is this problem happening?  Figure 4.56: Question #1 Diagram
|
|
| 2. | Over a weekend, you upgrade your Windows NT 4.0 domain through the Windows Server 2003 interim functional level up to the Windows Server 2003... |
