nerdexam
GIAC

GSEC · Question #375

Rick works as a Network Administrator. He is configuring the systems for maximum security. Before using the security template, he wants to edit it to change some of the security settings that are…

The correct answer is C. Security Templates MMC snap-in. The Security Templates MMC snap-in is the dedicated tool for creating and editing Windows security template files (.inf), allowing administrators to customize security settings before deployment.

Windows and Malware

Question

Rick works as a Network Administrator. He is configuring the systems for maximum security. Before using the security template, he wants to edit it to change some of the security settings that are not required for now. Which of the following tools will he choose, to edit the security template?

Options

  • AGroup Policy MMC snap-in
  • BSecurity Configuration and Analysis MMC snap-in
  • CSecurity Templates MMC snap-in
  • DSECEDIT utility

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    71% (17)
  • D
    17% (4)

Why each option

The Security Templates MMC snap-in is the dedicated tool for creating and editing Windows security template files (.inf), allowing administrators to customize security settings before deployment.

AGroup Policy MMC snap-in

The Group Policy MMC snap-in manages Group Policy Objects applied to Active Directory, and is not used to directly edit standalone security template files.

BSecurity Configuration and Analysis MMC snap-in

The Security Configuration and Analysis MMC snap-in is used to apply a security template to a system and compare the system's current configuration against a template, not to edit the template itself.

CSecurity Templates MMC snap-inCorrect

The Security Templates MMC snap-in provides a graphical interface specifically for defining and editing security templates, which contain configurable settings for account policies, local policies, event logs, and more. It allows an administrator to open an existing template and modify individual settings prior to applying or analyzing it.

DSECEDIT utility

The SECEDIT utility is a command-line tool used to apply, analyze, or export security configurations, but it does not provide an interface for editing security template settings.

Concept tested: Windows Security Templates MMC snap-in for template editing

Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc739087(v=ws.10)

Topics

#security templates#MMC snap-in#Windows security#Group Policy

Community Discussion

No community discussion yet for this question.

Full GSEC Practice