Your network contains 200 Web servers that run Windows Server 2008. You need to plan the
management of security settings for all servers on the network. The solution must meet the
following requirements:
• Minimize administrative effort.
• Maintain identical security settings for all servers.
• Enable compliance audits of servers added to the network.
What should you do first?
A.
On each server, configure a local security audit policy.
B.
On one server, run the Security Configuration Wizard (SCW).
C.
On one server, install and run the Microsoft Security Assessment Tool (MSAT).
D.
On one server, install and run the Microsoft Baseline Security Analyzer (MBSA).
Explanation:
To maintain identical security settings for all servers and enable compliance audits of servers added
to the network using minimum amount of administrative effort, you need to run Security
Configuration Wizard (SCW) on any one of the server on the network. SCW allows you to create a
policy on one system and then apply it to many systems. If you are building out a network with many
systems, you should first define host classes that are all configured separately. Then you can create a
policy using one of them as a prototype and easily apply the policy to all the others with little to no
modifications.
Security Watch Using SCW on Windows Server 2008 Configuring Your Server with SCW
http://technet.microsoft.com/en-us/magazine/cc194400.aspx