Question

DQ1: Discuss the importance of security baseline in configuration setting, and how does it relates to profiling.

DQ2: Name one Auditing tool that can be used for Microsoft window Security, and describe the process of auditing.

Answer 1

DQ1: Discuss the importance of security baseline in configuration setting, and how does it relates to profiling.

Solution : - Basline Security is also known as Minimum Security controls which are need to provide security to the organization by following the principal of Confidentiality, Integrity and Availability

It reduces or eliminates various security gaps which results  from Cyber Asssets that are not properly configured.

Profiling is a process of examining data from an existing source and summarizing information about data. whereas process of baselining involves both cconfiguration of IT environment to confirm to consistent standard levvels  

DQ2: Name one Auditing tool that can be used for Microsoft window Security, and describe the process of auditing.

Solution :-  

Netwrix is an Auditing tool which can be used for Microsoft Window Security . It delivers change audit reports on all criticalWindows Security log events, including changes to local users and groups, services , advanced audit policy settings, and critical servers like domain controllers.

Auditing is a process to keep track of files and folders, it allows the Admin to keep track of various activities like opening, closing, modifying, deleting or accessing any file or folder.In order to audit you must enavle Microsoft windows security auditing features. The process of auditing includes three steps:

1, Enablle Audit Policies

2. Applying Policies on Files/ Folders

3. Checking Event View Security Log

Audit Security Group Management is used in Windows OS to generate audit events when specific security group management tasks are performed.

It provides to audit following things:

1. Whether a Security group created or changed , or deleted.

2. Whether a memeber is added or removed from security group

3. Whether a group type is changed.

Security logs are configured using default Domain Controller group policy. To access it

Step 1: - Go to Computer Configuration

Step 2: - Then,Go to Windows Settings

Step 3: - Next go to security settings

Step 4: - Then Select Local Policies and then

Step 5: - Select Audit Policies

Here you will get number of policies which you can configure according to your needs there are two options for it which is Success or Failure. Success means apply that policy whereas Failure means does not apply that policy