2.2 Windows Security settings

Question 1

What are the main types of user accounts in Windows?

Answer 1

• Local accounts
• Microsoft accounts
• Domain accounts

These account types vary in management and integration with cloud services.

Question 2

What is a local account in Windows?

Answer 2

An account stored and managed on a single device without cloud or domain integration

Local accounts are specific to the device and do not sync with other devices.

Question 3

What is a Microsoft account?

Answer 3

A cloud-based account used to log into Windows and access Microsoft services

This account allows synchronization of settings and access to online services.

Question 4

What is a domain account?

Answer 4

An account managed centrally by a directory service like Active Directory in a corporate environment

Domain accounts provide access to network resources and are managed by IT administrators.

Question 5

What are common Windows user group types?

Answer 5

• Administrators
• Guest accounts

These groups define the level of access and permissions for users.

Question 6

What is the purpose of the Administrator account/group?

Answer 6

It has elevated privileges to manage system settings, software, and users

Administrators can make significant changes to the system.

Question 7

What is the purpose of a Guest account?

Answer 7

It provides limited, temporary access with restricted permissions

Guest accounts are useful for visitors needing brief access.

Question 8

What is Windows Hello?

Answer 8

A Windows authentication system that supports biometric and alternative login methods

Windows Hello enhances security by allowing users to log in using facial recognition or fingerprints.

Question 9

What authentication methods does Windows Hello support?

Answer 9

• Biometrics (fingerprint, facial recognition)
• PINs
• Security keys

These methods provide secure alternatives to traditional passwords.

Question 10

Why are PINs considered secure in Windows Hello?

Answer 10

They are device-specific and not transmitted over the network like passwords

This reduces the risk of interception during login.

Question 11

What are NTFS permissions?

Answer 11

File system permissions applied to local files and folders on Windows systems

NTFS permissions control access to files and directories.

Question 12

What are share permissions?

Answer 12

Permissions applied to folders shared over a network

Share permissions determine access levels for users connecting over a network.

Question 13

When both NTFS and share permissions are applied, which one takes precedence?

Answer 13

The most restrictive permission applies

This ensures that access is limited to the least permissive setting.

Question 14

What is permission inheritance?

Answer 14

When child folders and files automatically receive permissions from their parent folder

This simplifies permission management across a directory structure.

Question 15

What are explicit permissions?

Answer 15

Manually assigned permissions that override inherited permissions

Explicit permissions allow for specific access control on files or folders.

Question 16

What is User Account Control (UAC)?

Answer 16

A Windows security feature that prompts for approval or credentials before allowing administrative actions

UAC helps prevent unauthorized changes to the system.

Question 17

Why should users avoid running as Administrator by default?

Answer 17

To reduce the risk of accidental system changes or malware gaining full control

Running with standard user privileges enhances security.

Question 18

What is the purpose of UAC prompts?

Answer 18

To securely request elevated privileges when needed for system changes

UAC prompts help maintain system integrity.

Question 19

What is Full Disk Encryption (FDE)?

Answer 19

Encryption that protects all data on a storage device from unauthorized access

FDE secures data at rest, making it unreadable without proper authentication.

Question 20

What is BitLocker?

Answer 20

Microsoft’s full disk encryption solution for Windows systems

BitLocker encrypts the entire drive to protect data from theft.

Question 21

What is BitLocker To Go?

Answer 21

A feature that encrypts removable storage devices like USB drives

This feature ensures data on portable drives is secure.

Question 22

What is the Encrypting File System (EFS)?

Answer 22

A Windows feature that encrypts individual files and folders rather than the entire disk

EFS allows for selective encryption of sensitive data.

Question 23

When is BitLocker typically used?

Answer 23

To protect entire drives, especially on laptops and devices at risk of theft

BitLocker is crucial for safeguarding data on portable devices.

Question 24

When is EFS typically used?

Answer 24

To encrypt specific files or folders while the rest of the disk remains unencrypted

EFS is ideal for protecting sensitive documents without encrypting the entire disk.