70-293 Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure Training Course

Demo Question 7.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. The EliteCertify.com intranet Web site is hosted on a Web server named EliteCertify -SR11. Users in the Human Resources department make confidential EliteCertify.com employee information available on the EliteCertify.com intranet Web site. An application named App6 is used to enable users to access their personal information. All personal information resides in a virtual directory folder named Employee. The EliteCertify.com written security policy only allows employees to access their specific employee file through the intranet Web site. All information in these files is confidential. The security policy also requires all employee information to be encrypted as it is transmitted over the network. You need to ensure that the two requirements stipulated in the EliteCertify.com written security policy are enforced. You do not want to encrypt all information available on the intranet Web site, other than the employee information. What should you do? (Each correct answer presents part of the solution. Choose TWO.)

A. Configure EFS to encrypt the Employee virtual directory.
B. Configure the Employee virtual directory to require SSL
C. Install a digital certificate on EliteCertify -SR11.
D. Configure EliteCertify -SR11 to encrypt secure channel data.


Display Answer

Answer: B, C

Explanation: To ensure that all employee information is encrypted as it is transmitted over the network between EliteCertify -SR11 and client computers, you need to firstly install a digital certificate on EliteCertify -SR11 and then configure the Employee virtual directory to require SSL. Secure Socket Layer (SSL) is a Windows Server 2003 security protocol which utilizes a public-key technology to provide a secure channel for applications communicating over a non-secure network such as the Internet. SSL is typically used by Web browsers and Web servers for secure communication channels. The SSL protocol functions at the OSI model's network layer to provide encryption for the following protocols: HTTP, LDAP, and IMAP. Incorrect answers: A. EFS is applied to file systems and not to Web servers. Also, when EFS encrypted data is transmitted over the network, it sent in the decrypted format. D. Secure channel is used between domain controllers and domain member computers, and not between client computers and intranet Web sites.