quote:

---

Originally posted by wbafrank
And today's poser is ....

Q28. Alison is in a meeting with her manager Frank and they are discussing the administration of the Remote Access Servers at the Flower Farm Collective.

Frank: "I'd like you to set up the remote access policy so that users are locked out if they enter the wrong password several times when they are dialing into our server."
Alison: "Okay, how about we lock them out for 48 hours if they enter the wrong password 5 consecutive times when using dialup?"
Frank: "That sounds good. Now can you explain to me how you set up the remote access server?"
Alison: "The server has been set up with default settings. I created a new group called flowerrasusers and it contains those users who require the ability to access our network via dial up."
Frank: "I'm still concerned that people that aren't members of this group are somehow getting dial-in access. Also, is it possible for you to limit access to non-buisness hours?"
Alison: "Yes, that should be possible."

After the meeting Frank hands Alison the following set of goals for her to achieve with respect to the RAS servers:

Primary Goal:
1. Deny Users Access for 48 hours if they enter the incorrect password 5 times.

Secondary Goals:
1. Limit access to RAS service to members of the flowerrasusers group.
2. Restrict RAS access to between 5pm and 8am for normal users.
3. Allow Administrators unlimited access to the RAS server at all times.
Which of the following achieves the primary goal but does not achieve any of the secondary goals?

A. Perform the following actions:
- Run regedit or regedt32.
- Go to the subkey HKEY_LOCAL_MACHINE\SYSTEM\ CurrentControlSet\Services\Rem
oteAccess\Parameters\ AccountLockout
- Change the entry on MaxDenials from zero to five.
B. Perform the following actions:
- Run the Routing and Remote Access Service utility from the Administrative Tools menu.
- Expand the Current Server.
- Right Click the Remote Access Policies Node.
- Select "New Remote Access Policy".
- Select Add. Select Windows-Groups. Select flowerrasusers. Select Close. Right Click on flowerusers. Select "login between 5pm and 8am". Select Close.
- Select Add. Select Windows-Groups. Select Administrators. Select Close. Right Click on Administrators. Select "no logon restriction". Give the Policy the name "flower-lockout". Select Next. Select Add. Select Lockout after 5 attempts. Set the "reset lockout after" box to 48 hours. Click Close.
C. Perform the following actions:
- Run the Routing and Remote Access Service utility from the Administrative Tools menu.
- Expand the Current Server.
- Right Click the Remote Access Policies Node.
- Select "New Remote Access Policy".
- Give the Policy the name "flower-lockout". Select Next. Select Add. Select Lockout after 5 attempts. Set the "reset lockout after" box to 48 hours. Click Close.
- Select Add. Select Windows-Groups. Select flowerrasusers. Select Close. Right Click on flowerusers. Select "login between 5pm and 8am". Select Close.
- Select Add. Select Windows-Groups. Select Administrators. Select Close. Right Click on Administrators. Select "no logon restriction". Select Close.
D. Perform the following actions:
- Run the Routing and Remote Access Service utility from the Administrative Tools menu.
- Expand the Current Server.
- Right Click the Remote Access Policies Node.
- Select "New Remote Access Policy".
- Give the Policy the name "flower-lockout". Select Next. Select Add. Select Windows-Groups. Select Administrators. Select Close. Right Click on Administrators. Select "no logon restriction". Select Add. Select Lockout after 5 attempts and set the "reset lockout after" box to 48 hours. Select Add. Select Windows-Groups. Select flowerrasusers. Click close.

---