You have a series of new Windows Server 2003 systems, including 3 new web servers running IIS
6.0.
You are concerned about the overall security of your servers, and are checking with Microsoft for
any patches or updates that you might need to apply to your systems. Which of the following
would you apply if you need to implement an update based on a critical Microsoft Security
Bulletin?

You have a series of new Windows Server 2003 systems, including 3 new web servers running IIS
6.0.
You are concerned about the overall security of your servers, and are checking with Microsoft for
any patches or updates that you might need to apply to your systems. Which of the following
would you apply if you need to implement an update to fix a specific problem that addresses a
critical, non-security-related bug?

You have a series of new Windows Server 2003 systems, including 3 new web servers running IIS
6.0.
You are concerned about the overall security of your servers, and are checking with Microsoft for
any patches or updates that you might need to apply to your systems. Which of the following
would you apply if you need to implement a single update, which contains a single cumulative
package that includes multiple files that are used to address a problem in your IIS Servers?

You have recently installed a new Linux machine, running Apache as your web server. You are
running Novell SuSe Linux, and are going to use YaST to disable some unneeded modules. In the
left-hand options of YaST, which section would you choose in order to disable modules for your
Apache web server?

You have recently installed an Apache Web server on a SuSe Linux machine. When you return
from lunch, you find that a colleague has made a few configuration changes. One thing you notice
is a .htpasswd file. What is the function of this file?

Recently you found out that there has been a flood of bogus network traffic hitting your Email
server.
Because of this flood, authorized users have not been able to consistently send or receive email.
What is happening to your Email server?

You are concerned that email messages sent to your Outlook clients could contain customized
and dangerous scripting. What can you do to minimize the threat that this specific type of email
presents?

You are conducting a security awareness session for some of the employees in your organization.
The discussion moves to the use if the web browser, which is Internet Explorer 7.0 for all
employees. What are the four Zones that are available in Internet Explorer 7.0?

Microsoft has developed several security tools to help you with the security and configuration of
the systems in your network. One of these tools is the Microsoft Security Baseline Analyzer
(MBSA). In the command line options of the MBSA is the HFNetChk tool. What is the function of
the HFNetChk tool, available with MBSA?

You just installed a new SuSe Linux web server, running Apache, and are in the process of
hardening the server. The server will perform basic web services, static web pages to internal
clients only. Which of the following would you not perform to harden this system?