Your network contains one Active Directory domain named contoso.com. The domain contains
2,000 client computers used by students. You recently discover an increase in calls to the helpdesk
that relate to security policy to meet the following requirement:
Modify the UserName of the built-in account named Administrator
Support a time mismatch between client computers and domain controllers of up to three minutes.
Which Two security settings should you modify?
A.
Account Policies
B.
Password Policy
C.
Account Lockout Policy
D.
Kerberos Policy
E.
Local Policies
F.
Audit Policy
G.
User Rights Assignment
H.
Security Options
Explanation:
In Group Policy Object Editor, click Computer Configuration, click Windows
Settings, click Security Settings, click Local Policies, and then click Security Options.
In the details pane, double-click Accounts: Rename administrator account.
In Group Policy Object Editor, Open Computer Configuration, open Windows Settings, and then open Security Settings.
Click Account Policies, double-click Kerberos Policy, and then double-click Maximum tolerance for computer clock synchronization
https://technet.microsoft.com/en-us/library/cc780011(v=ws.10).aspx
GPO – Maximum tolerance for computer clock synchronization
1
0
D. and H. are correct.
Explanation:
D. – In Group Policy Object Editor, click Computer Configuration, click Windows Settings, click Security Settings, click Account Policies, click Kerberos Policy.
In the details pane, double-click In the details pane, double-click “Maximum tolerance for computer clock synchronization”
H. – In Group Policy Object Editor, click Computer Configuration, click Windows Settings, click Security Settings, click Local Policies, and then click Security Options.
In the details pane, double-click Accounts: Rename administrator account.
http://www.aiotestking.com/microsoft/which-two-security-settings-should-you-modify-3/
1
0