Thanks for taking the test!

Question

Thanks for taking the test!

Brian Knight

One Orange Chip

Points: 27249
More actions
May 22, 2003 at 6:03 am

#105726

Thanks for taking the test. This forum is a private forum where you can discuss the answers and questions on the test. Please feel free to give us your suggestions about things you didn't like about the questions or interface as well! There will be many more of these soon.
Just in case you didn't see the bullet in the test, this contest ends on the 14th of June and a random person who passed the test will be picked then and emailed.
Brian Knight
bknight@sqlservercentral.com
http://www.sqlservercentral.com/columnists/bknight
Brian Knight
Free SQL Server Training Webinars

Viewing 15 posts - 1 through 15 (of 45 total)

You must be logged in to reply to this topic. Login to reply

orti7483 SSC Enthusiast Points: 104 More actions · Answer 1

I think some of the questions where not realistic. When do you really grant or deny permissions to individual IDs? Permissions in the real world are hardly ever granted in such a way.

SQLBill SSC Guru Points: 51440 More actions · Answer 2

I enjoyed the test...showed me a lot I didn't know. And a couple I didn't read closely enough (missed the UDP and 'assumed' it was TCP).

Thanks for taking the time to create it.

-SQLBill

VegaMachine SSCrazy Points: 2080 More actions · Answer 3

Very good test, and very real world! I'm on a network security team and this is the stuff I deal with almost daily. Can't wait to take the next one!

- Vega

Brian Knight One Orange Chip Points: 27249 More actions · Answer 4

quote:
I enjoyed the test...showed me a lot I didn't know. And a couple I didn't read closely enough (missed the UDP and 'assumed' it was TCP).

When I was giving the same test to my team, 90% of them missed that question as well. I guess they ran through it too quick as well when they saw 1433 ;).

Brian Knight

bknight@sqlservercentral.com

http://www.sqlservercentral.com/columnists/bknight

Brian Knight
Free SQL Server Training Webinars

Frank Kalis SSC Guru Points: 111183 More actions · Answer 5

Very interesting test!

Next time I spent more attention, that's definitely nothing you can do by the way when dealing a hedge swap on the phone. The results were devastating

Cheers,

Frank

--
Frank Kalis
Microsoft SQL Server MVP
Webmaster: http://www.insidesql.org/blogs
My blog: http://www.insidesql.org/blogs/frankkalis/[/url]

varunmarwaha Valued Member Points: 58 More actions · Answer 6

Fantastic Test, Liked doing it , wish i had scored more committed a lot of unforced errors and hence got only 10 right. Maybe have a better luck next time

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 7

This is definitely a test you can't take distracted. That means no Quake and SQL Server security testing at the same time.

K. Brian Kelley

http://www.truthsolutions.com/

Author: Start to Finish Guide to SQL Server Performance Monitoring

http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1

K. Brian Kelley
@kbriankelley

orfda SSC Enthusiast Points: 132 More actions · Answer 8

Yeah that 1433/tcp 1434/udp thing tripped me up as well.

It was fun :).

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 9

At least he didn't ask about 2433...

K. Brian Kelley

http://www.truthsolutions.com/

Author: Start to Finish Guide to SQL Server Performance Monitoring

http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1

K. Brian Kelley
@kbriankelley

SQLBill SSC Guru Points: 51440 More actions · Answer 10

And the test shouldn't be changed to make the UDP more obvious. Good Security is never obvious or easy...it takes work and paying attention to detail, which is what I forgot to do.

-SQLBill

efelito SSC Veteran Points: 277 More actions · Answer 11

Good test. Had to take a little time to think things through. I flip flopped my thoughts on revoke vs deny, so I missed those two and I've never use the C2 audit setting, so I just guessed that it would be stored in the logs directory. Now I know! I'll be waiting for my winning notification email! Thanks for the quiz... keep em coming.

lakusha SSCommitted Points: 1857 More actions · Answer 12

I enjoyed the test.

Was surprised not to see any question about SPN and kerberos authentification. This is one of the more confusing aspect of sequel security.

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 13

quote:
Was surprised not to see any question about SPN and kerberos authentification.

But you only see this in an Active Directory environment. A lot of companies are still NT 4.0.

K. Brian Kelley

http://www.truthsolutions.com/

Author: Start to Finish Guide to SQL Server Performance Monitoring

http://www.netimpress.com/shop/product.asp?ProductID=NI-SQL1

K. Brian Kelley
@kbriankelley

powilliams SSC Enthusiast Points: 194 More actions · Answer 14

Good test. It has been a while since I've had to think some things through, but ultimately, I think it was too easy. After all, if I could ace it, it must be too easy. Thanks to all for putting it together.

I can't wait for the next installment.