Windows Server Security Audit Quiz

You suspect unauthorized modifications to user accounts in Active Directory. Which Windows Security Event log category would show relevant events?

Which Windows Event Log category is typically used to audit user creation/deletion events?

Which Windows Event ID corresponds to a user account being created?

Which Windows Event ID corresponds to a successful user logon?

Which registry path would you audit to verify the TLS versions enabled on a Windows Server?

Which protocol does the Windows Network Time Protocol (NTP) service use by default?

Write the Microsoft solution that serves as a modern alternative to Remote Server Administration Tools (RSAT)?

Which DNS record type is used to map an IP address to a domain name in Windows Server DNS?

Which DNS record type is used to map a domain name to an IP address in Windows Server DNS?

Which DNS record type is used to create an alias for another domain name?

Which DNS record type is used for the core feature of Exchange Servers?

Which command is used to audit active network connections, their ports and associated services on a Windows Server?

What is the minimum encryption algorithm recommended for securing communication between Active Directory Domain Controllers?

What is the default port used by the Remote Desktop Protocol (RDP) on a Windows Server?

What is the primary function of AD DS?

What is the default port commonly used for SMTP?

What default port does NTP use?

Select the valid NTP commands

Remote Access is a Windows Server:

Drag the ports to the commonly associated service/protocol