Lab 1 Worksheet

1. Active Directory and the configuration of access controls achieve C-I-A for folders and data because it controls who can access certain files and folders. This keeps the data confidential since only authorized users can access the files as well as keeping the integrity of the data as it is not able to be modified by unauthorized users. It also meets the accessibility requirements of C-I-A since the authorized users are able to access the resource through proper configuration of the Active Directory Domain Services.

2. It is not a good practice to include the user name in the password since authentication protocols may only transmit the password in cipher text but the user name as plain text, this makes it easy to intercept a user name and if that user name is part of the password, it makes it that much easier to break.

3. Password length and complexity requirements will ensure users are forced to have strong passwords to their accounts and password length and history will ensure the passwords are changed in reasonable increments of time as well as not being able to use the same password when a password change is required.

4. No, a user outside of the domain cannot access a shared drive within a domain.

5. Yes, a prompt requesting login credentials will appear when attempting to access a shared drive.

6. By default, the guests group has the least amount of implied privileges within the Active Directory structure.

7. Implementing controls to limit the guest account to only things that need to access and nothing else, read only would also be good as it would not let the guest account modify or delete any data.

8. Folder privileges for the Shop Floor group need to be configured to grant the group access to the SFfiles folder.

9. Same as the last question, folder permissions need to be assigned to the Human Resource group that that users within that group can access the files within the HRfiles folder.

10. C-I-A can be achieved because file and folder permissions can be assigned to groups for different departments within a company; this way access is granted to those that need access and denied to those who do not need access. These controls ensure the C-I-A of data within the company’s network with all these controls easily configured using Active Directory.