Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 91:

  Mark works as a Network Administrator for TechMart Inc. The company has a Windows-based network. Mark wants to implement a method to ensure that the mobile devices are in a good state of security health when they are trying to access the corporate network. For this purpose, Mark is using NAP. Which of the following will he do for those computers in the network that are not compatible with NAP?

  A. Define exceptions in NAP for computers that are not compatible with NAP.
  B. Hide those computers that are not compatible with NAP.
  C. Remove those computers that are not compatible with NAP.
  D. Do not use the NAP, if any of the computers is showing incompatibility in the entire network.
  A. Define exceptions in NAP for computers that are not compatible with NAP.

  ---

  Network Access Protection (NAP) is a set of operating system components included with the Windows Server 2008 and Windows Vista/7 operating systems. It ensures that the client computers on a private network meet administrator-defined requirements for system health. NAP policies define the required configuration and update status for a client computer's operating system and critical software. For example, an administrator can set policies that computers might be required to have antivirus software with the latest virus definition installed and current operating system updates. Using NAP, a network administrator can enforce compliance with health requirements for the client computers connection to the network. NAP helps network administrators to reduce the risk caused by improperly configured client computers that might be exposed to viruses and other malicious software. It is required to define exceptions in NAP for those devices that are not compatible with NAP.

• Question 92:

  Sam works as a Web Developer for McRobert Inc. He wants to control the way in which a Web browser receives information and downloads content from Web sites. Which of the following browser settings will Sam use to accomplish this?

  A. Security
  B. Certificate
  C. Cookies
  D. Proxy server
  A. Security

  ---

  The Web browser's Security setting controls the way in which a Web browser receives information and downloads content from Web sites. In Internet Explorer, users can access the Security setting from Tools menu > Internet Options >

  Security tab page.

  Answer: C is incorrect. A cookie is a small bit of text that accompanies requests and pages as they move between Web servers and browsers. It contains information that is read by a Web application, whenever a user visits a site. Cookies are

  stored in the memory or hard disk of client computers. A Web site stores information, such as user preferences and settings in a cookie. This information helps in providing customized services to users. There is absolutely no way a Web

  server can access any private information about a user or his computer through cookies, unless a user provides the information. The Web server cannot access cookies created by other Web servers. Answer: D is incorrect. Proxy server

  setting is used to connect to the Internet through a proxy server.

• Question 93:

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 94:

  Password history policies are used to prevent:

  A. Brute force attacks
  B. Users from sharing passwords
  C. Social engineering
  D. Passwords from being reused immediately
  D. Passwords from being reused immediately

  ---

  This security setting determines the number of unique new passwords that have to be associated with a user account before an old password can be reused. The value must be between 0 and 24 passwords.

  This policy enables administrators to enhance security by ensuring that old passwords are not reused continually.

  Reference: http://technet.microsoft.com/en-us/library/cc758950(v=ws.10).aspx

• Question 95:

  Account lockout policies are used to prevent which type of security attack?

  A. Brute force attacks
  B. Users sharing passwords
  C. Social engineering
  D. Passwords being reused immediately
  A. Brute force attacks

• Question 96:

  Which is a special folder permission?

  A. Read
  B. Modify
  C. Write
  D. Delete
  D. Delete

  ---

  Reference: http://support.microsoft.com/kb/308419

• Question 97:

  Role separation improves server security by:

  A. Enforcing principle of least privilege.
  B. Installing applications on separate hard disks.
  C. Physically separating high security servers from other servers.
  D. Placing servers on separate VLANs.
  A. Enforcing principle of least privilege.

• Question 98:

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 99:

  This question requires that you evaluate the underlined text to determine if it is correct.

  To determine which action, if any, to take on an inbound message, anti-spam and antivirus recipient filtering inspects the IP address of the remote server that is trying to send messages.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

  A. connection
  B. sender
  C. content
  D. No change is needed
  A. connection

  ---

  References: https://docs.microsoft.com/en-us/office365/SecurityCompliance/configure-the-connection-filter-policy

• Question 100:

  Mark works as a Network Administrator for TechMart Inc. The company has a Windows-based network. Mark wants to implement a method to ensure that the mobile devices are in a good state of security health when they are trying to access the corporate network. Which of the following is a control or strategy that Mark will implement to assure the security health?

  A. TCP/IP protocol
  B. Kerberos
  C. Single Sign On
  D. Network Access Protection
  D. Network Access Protection

  ---

  Network Access Protection (NAP) is a set of operating system components included with the Windows Server 2008 and Windows Vista/7 operating systems. It ensures that the client computers on a private network meet administrator-defined requirements for system health. NAP policies define the required configuration and update status for a client computer's operating system and critical software. For example, an administrator can set policies that computers might be required to have antivirus software with the latest virus definition installed and current operating system updates. Using NAP, a network administrator can enforce compliance with health requirements for the client computers connection to the network. NAP helps network administrators to reduce the risk caused by improperly configured client computers that might be exposed to viruses and other malicious software. Answer: C is incorrect. Single sign-on (SSO) is defined as a mechanism in which a single action of user authentication and authorization is used to allow a user to access all computers and systems where he got a access permission, without entering passwords for multiple times. Answer: B is incorrect. Kerberos is defined as a secure method used for authenticating a request for a service in a computer network. Answer: A is incorrect. TCP/IP protocol is used to define the rule computers are required to follow for communicating with each other over the internet.