Key Terms in C#

Printing QR Code JIS X 0510 in C# Key Terms

administrative role Used to assign permissions on ISA Server. Each administrative role has a predefined set of permissions that allow the user to perform specific tasks on the ISA Server computer. firewall access rule A configuration object on ISA Server that defines what types of network traffic will be allowed on the ISA Server computer. By default, all network traffic is blocked unless a firewall access rule allows the specific traffic. Remote Management Computers A computer set that is used to provide remote management access to ISA Server. This computer set should include all the IP addresses of the computers that are used to perform remote administration on the ISA Server computer. system policy A set of firewall access rules that controls how the ISA Server computer communicates with computers on the attached networks.

3-43

Page 3-24

1. On ISA1, open ISA Server Management. Right-click ISA1 and click Administration Delegation. 2. On the Welcome To The ISA Server Administration Delegation Wizard page, click Next. 3. What roles have been assigned to the following groups a. Cohovineyard\Administrator

4. Click Cancel. 5. Expand Configuration and click Networks. In the details pane, click Network Rules. 6. Review the Network Rules. List the network relationships between the networks listed below: a. Local Host and All Networks

7. In the console tree, click Firewall Policy. What rule(s) are listed Describe the rule configuration.

8. On the Tasks tab, click Show System Policy Rules. Locate the rule named Allow access from trusted computers to the Firewall Client installation share on ISA Server. Double-click the rule. What does this rule enable What network is included in this rule

The rule enables access to the Firewall Client installation share on the computer running ISA Server. Only the Internal network is included in the rule.

3-44

3

9. In the console tree, expand Configuration and click Cache. Under Tasks, click Define Cache Drives. What is the default size of the Maximum cache size What does this indicate about the default cache configuration Click OK.

Page 3-26

1. You want your Help Desk group to be able to monitor the ISA Server Dashboard. Your organization has a security policy that requires that all users be assigned as few permissions as possible to complete their tasks. You assign the ISA Server Basic Monitoring role to the Help Desk group on the ISA Server computer. However, none of your help desk employees can view the performance information in the ISA Server Dashboard. What is the problem and how would you resolve it a. The Help Desk group needs to be added to the local Administrators group on the computer running ISA Server. b. You need to create an access rule to allow the Help Desk group to connect to the ISA Server computer. c. The Help Desk group needs to be added to the local Performance Monitor Users group on the computer running ISA Server. d. The help desk group needs to be added to the Server Operators domain local group.

C is correct. The Help Desk group needs to be added to the Performance Monitor Users group on the computer running ISA Server. Users that are assigned to the ISA Server Basic Monitoring role can view all ISA Server Dashboard information except the performance counters. Adding the Help Desk group to the local Administrators group would give them the required permissions, but would also give them full administrative rights on the ISA Server computer, so this would violate the company policy.

2. You work for a large company with several branch offices. Each of the locations has an Internet connection as well as a dedicated wide area network (WAN) connection to the corporate head office. You install and configure ISA Server 2004 in each branch office. The ISA Server computers are not members of an Active Directory domain. You need to ensure that the same operating system security settings are applied to each ISA Server. What should you do a. Create a script that shuts down all the services that are not required on one of the servers running ISA Server. Run the same script on all the computers running ISA Server. b. Document the security settings on one of the servers. Send the document to an administrator in each office, asking them to duplicate the configuration. c. Create a security template with your security settings. Apply the security template using Group Policy.