70-210 - Sat W2K Professional Question of the Day

Author

Sat W2K Professional Question of the Day

wbafrank

2002-05-04, 3:39 pm

And today's poser is ....

Q91. You have decided that you want to prevent users from using passwords that contain their user account names. Which GPO should you configure?

A. Enforce Password History.

B. Passwords Must Meet Complexity Requirements.

C. Minimum Password length.

D. Minimum Password Age.

Good Luck .... see you tomorrow for the answer!!

Samba

2002-05-04, 4:28 pm

I am just working on it in my study
guide !!
So, "A" is my choice..
Have a nice week-end ..

denis_baribeau

2002-05-04, 4:33 pm

I'll take a stab at it and go for

(B.) Passwords Must Meet Complexity Requirements.

But I should brush up on security subject.

Ga Yankee

2002-05-04, 5:44 pm

B Sounds Good

Zaraspook

2002-05-04, 6:29 pm

How about B?

TxBear

2002-05-04, 8:49 pm

It has to be B

itsahabit

2002-05-04, 9:00 pm

Definitely "B". The most draconian of all the password GPO's!

NetChild1985

2002-05-05, 2:12 am

"B" for me!

LOCO_LEVY

2002-05-05, 3:10 am

The answer is the "B" . The administrator he/she has to have the necessity of complexity

By default, this setting is disabled in the Default Domain Group Policy object (GPO) and in the local security policy of workstations and servers.

If this policy is enabled, then passwords must meet the minimum requirements described in the Notes section.

The default password filter (passfilt.dll) included with Windows 2000 requires that a password:

Does not contain all or part of the user's account name
Is at least six characters in length
Contains characters from three of the following four categories:
English upper case characters (A..Z)
English lower case characters (a..z)
Base 10 digits (0..9)
Nonalphanumeric (For example, !,$#,%)
Complexity requirements are enforced upon password change or creation.

Samba

2002-05-05, 3:18 pm

OK, I am probably in the bad configuration
This is why I went for "A"

Setting up a Local Account Security Policy

Click Start/Programs/Admin.Tools/Local
Security Policy and expand Account
Policies/Select Password Policy.
Double click Minimum Password Lenght and
set the minimum lenght to 6 characters.
Double click on "Enforce Password History"
and set the number of Password to be
remembered.

jakob79

2002-05-06, 12:57 am

B it is

Shadowwraith

2002-05-06, 10:55 am

B on this one.

winfried

2002-05-06, 1:43 pm

B for me

mcdoud

2002-05-06, 2:37 pm

B is my choice too.

wbafrank

2002-05-06, 4:22 pm

quote:
Originally posted by wbafrank
And today's poser is ....

Q91. You have decided that you want to prevent users from using passwords that contain their user account names. Which GPO should you configure?

A. Enforce Password History.
B. Passwords Must Meet Complexity Requirements.
C. Minimum Password length.
D. Minimum Password Age.

Good Luck .... see you tomorrow for the answer!!

And the answer is ....

Correct Answers: B

A. Incorrect: This policy does not enforce the content of a password but dictates the number of unique passwords that a user logging on to a computer must use before an old password can be reused.

B. Correct: This policy does enforce the content of a password by verifying that the password meets a specific set of complexity requirements. These include that the password cannot contain all or part of the user's account name, is at least 6 characters long, and contains characters from any of these groups:

1. English uppercase characters (A - Z)
2. English lowercase characters (a - z)
3. Base 10 digits (0 - 9) or nonalphanumeric characters (for example ! $ # %)

This policy is enforced only when a user account is created or a password is changed.

Note: By default, this policy is disabled in the Default Domain Policy GPO and in the local security policy of standalone and workgroup computers running Windows 2000 Professional.

C. Incorrect: This policy does enforce the content of a password by requiring a minimum number of characters in the password. In most cases, this policy setting does allow the password to contain the user account name.

D. Incorrect: This policy does not enforce the content of a password but dictates the period time (in days) that a password must be used before the user can change it.

Sponsored Links