640-802 dumps,VCP-310 and 350-001 testking

You work as the network administrator at Certifyme.com. The Certifyme.com
network consists of a single Active Directory domain named certifyme.com. All
servers on the Certifyme.com network run Windows Server 2003 and all client
computers run Windows XP Professional.

Certifyme.com currently shares office space with various other companies.350-001 As a
security measure, all Certifyme.com servers are kept in a room that that is locked at
all times. As part of Certifyme.com's security strategy, you have applied the
securedc.inf predefined security template to all domain controllers and the
securews.inf template to all member servers.
640-802 Certifyme.com is still, however, worried
that an unauthorized individual may gain physical access to the servers and attempt
to guess users' passwords.

You need to ensure that added security measures are implemented to minimize the
possibility of user passwords being compromised.

What should you do?

A. You have to apply the hisecdc.inf predefined security template to all domain
controllers.
B. You should use the Syskey utility to generate a system key, and then specify that this
system key be stored locally.
C. You have to apply the hisecws.inf predefined security template to member servers.
D. You should use the Syskey utility to generate a system key, and then specify that the
system key be stored on a floppy disk.

Answer: D
Explanation: Syskey
Leading the way in IT testing and certification tools, www.certifyme.com
- 13 -

is a utility that provides added protection to user passwords. It generates a system
key that is used to encrypt passwords. Therefore, if an unauthorized individual
gains physical access to a computer, he/she will not be able to read passwords.
Syskey provides three levels of protection. The least secure option is to store the
system key locally on the computer.VCP-310 The more secure option is to protect the system
key with an administrator-assigned password. That password is not stored on the
computer, and must be specified at startup. The most secure option is to store the
system key on a floppy disk, which is required at startup.

Incorrect Answers:
A, C: Using these options provides more security that using the securedc.inf and
securews.inf predefined security templates. They would not however be sufficient to
protect passwords in the event of an unauthorized individual gaining physical access to
the servers.
B: Storing the system key locally on the computer is the least secure option.