Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 111:

  HOTSPOT

  You are configuring the network settings of computers in your school's computer lab.

  Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 112:

  You need to hide internal IP addresses from the Internet while maintaining client access to the Internet.

  What should you implement?

  A. Port forwarding
  B. Secure Sockets Layer (SSL)
  C. Access Control Lists
  D. Network Address Translation (NAT)
  D. Network Address Translation (NAT)

• Question 113:

  You are trying to enable BitLocker on your father's computer.

  What is the purpose of the Trusted Platform Module (TPM) when it is used by BitLocker?

  A. to store an encrypted file allocation table for the protected drive
  B. to provide a co-processor that encrypts/decrypts data
  C. to verify the integrity of the early boot components
  D. to store the hashed data produced by BitLocker encryption
  C. to verify the integrity of the early boot components

• Question 114:

  Which of the following is a collection or list of user accounts or computer accounts?

  A. Group
  B. Active Directory
  C. Domain
  D. Public folder
  A. Group

  ---

  A group is a collection or list of user accounts or computer accounts. Groups can be used to simplify administration, especially when assigning rights and permissions. Answer: B is incorrect. Active Directory is a centralized and standardized system that is available with the Windows Server 2008 platform. Active Directory stores information in a central database and allows users to have a single user account called "domain user account" for the network. Active Directory helps to automate network management of user data, security, and distributed resources, thereby enabling interoperation with other directories. Active Directory is Microsoft's trademarked directory service, an integral part of the Windows architecture. This directory is especially designed for distributed networking environments. Answer: C is incorrect. In the Windows environment, a domain is a set of network resources that are part of a network and share a common directory database. A domain is administered as a unit with common rules and procedures. Each domain has a unique name. Users just have to log on to a domain to access the network resources within it. Answer: D is incorrect. A public folder is a storage area on public information store. It is used to collect, organize, and share information among users in an organization. It provides a permanent storage place. Moreover, it can be used to post information on an electronic bulletin board and store sharable items, i.e., calendars and contacts, etc. A public folder can be created and configured in an Exchange organization by administrators and other users who have sufficient access permissions.

• Question 115:

  Which of the following is a secret numeric password shared between a user and a system for authenticating the user to the system?

  A. PIN
  B. Private key
  C. Key escrow
  D. Public key
  A. PIN

  ---

  A personal identification number (PIN) is a secret numeric password shared between a user and a system for authenticating the user to the system. Answer: C is incorrect. Key escrow is an arrangement in which the keys needed to decrypt encrypted data are held in escrow so that, under certain circumstances, an authorized third party may gain access to those keys. These third parties may include businesses, who may want access to employees' private communications, or governments, who may wish to be able to view the contents of encrypted communications. Answer: B is incorrect. In cryptography, a private or secret key is an encryption/decryption key known only to the party or parties that exchange secret messages. In traditional secret key cryptography, a key would be shared by the communicators so that each could encrypt and decrypt messages. Answer: D is incorrect. A Public Key is known commonly to everybody. It is used to encrypt data. Only specific users can decrypt it. Data encryption is used to encrypt data so that it can only be decrypted with the corresponding private key owned by the public key owner. The public key is also used to verify digital signatures. This signature is created by the associated private key.

• Question 116:

  Which of the following types of attack is used to configure a computer to behave as another computer on a trusted network by using the IP address or the physical address?

  A. Distributed denial of service (DDOS) attack
  B. Honeypot
  C. RIP/SAP Spoofing
  D. Identity spoofing
  D. Identity spoofing

  ---

  Identity spoofing (IP address spoofing) will occur when the attacker wants to use an IP address of a network, computer, or network component without being authorized for this task. It allows the unprivileged code to use someone else's identity, and use their security credentials Answer: B is incorrect. A honey pot is a computer that is used to attract potential intruders or attackers. It is for this reason that a honey pot has low security permissions. A honey pot is used to gain information about the intruders and their attack strategies. Answer: C is incorrect. RIP and SAP are used to broadcast network information in a regular way regardless of no changes in the routing or service tables. RIP/SAP spoofing method is used to intercept the SAP and RIP broadcasts by using a spoofing modem/router, and then re-broadcast network information via its own routing table or service table. Answer: A is incorrect. In the distributed denial of service (DDOS) attack, an attacker uses multiple computers throughout the network that it has previously infected. Such computers act as zombies and work together to send out bogus messages, thereby increasing the amount of phony traffic. The major advantages to an attacker of using a distributed denial-of-service attack are that multiple machines can generate more attack traffic than one machine, multiple attack machines are harder to turn off than one attack machine, and that the behavior of each attack machine can be stealthier, making it harder to track down and shut down. TFN, TRIN00, etc. are tools used for the DDoS attack.

• Question 117:

  Which of the following tools traces all or specific activities of a user on a computer?

  A. Task Manager
  B. Event Viewer
  C. Network Monitor
  D. Keylogger
  D. Keylogger

  ---

  A keylogger is a software tool that traces all or specific activities of a user on a computer. Once a keylogger is installed on a victim's computer, it can be used for recording all keystrokes on the victim's computer in a predefined log file. An

  attacker can configure a log file in such a manner that it can be sent automatically to a predefined e-mail address. Some of the main features of a keylogger are as follows:

  It can record all keystrokes.

  It can capture all screenshots.

  It can record all instant messenger conversations. It can be remotely installed.

  It can be delivered via FTP or e-mail.

  Answer: A is incorrect. Task Manager is a utility that is used for managing applications, processes, and the general system performance and also for viewing the networking and user statistics. The Task Manager utility is used to run or end

  programs or applications. Administrators use this tool to quickly identify and terminate a rogue application.

  

  This utility can be run by invoking a Windows Security menu by using the Ctrl+Alt+Delkey combination and then clicking the Task Manager button or by right- clicking the task bar and then clicking the Task Managermenu option. Answer: B is

  incorrect. Event Viewer is an administrative utility that displays the event log of a computer running Windows NT. Event Viewer displays the following categories of events:

  Error: These events show significant problems, such as loss of data or loss of functionality. Warning: These events are not necessarily significant but indicate possible problems. Information: These events describe the successful operation of

  an application, driver, or service. Success Audit: These events show successful audited security access attempts.

  Failure Audit: These events show failed audited security access attempts. Answer: C is incorrect. Network Monitor (Netmon) is a protocol analyzer. It is used to analyze the network traffic. It is installed by default during the installation of the

  operating system. It can be installed by using Windows Components Wizard in the Add or Remove Programs tool in Control Panel. Network Monitor is used to perform the following tasks:

  1.Capture frames directly from the network.

  2.Display and filter captured frames immediately after capture or a later time. 3.Edit captured frames and transmit them on the network.

  4.Capture frames from a remote computer.

• Question 118:

  What are the main classes of biometric characteristics? Each correct answer represents a complete solution. Choose two.

  A. Psychological
  B. Behavioral
  C. Fundamental
  D. Physiological
  B. Behavioral
  D. Physiological

  ---

  Answer: D and B

  A biometric device is used for uniquely recognizing humans based upon one or more intrinsic, physical, or behavioral traits. Biometrics is used as a form of identity access management and access control. It is also used to identify individuals

  in groups that are under surveillance.

  Biometric characteristics can be divided into two main classes:

  1.Physiological: These devices are related to the shape of the body. These are not limited to the fingerprint, face recognition, DNA, hand and palm geometry, and iris recognition, which has largely replaced the retina and odor/scent.

  2.Behavioral: These are related to the behavior of a person. They are not limited to the typing rhythm, gait, and voice.

  Answer: A and C are incorrect. These are not the classes of biometric characteristics.

• Question 119:

  A process by which DNS zone data is obtained by an attacker is referred to as:

  A. spoofing
  B. footprinting
  C. phishing
  D. Denial of Service
  B. footprinting

• Question 120:

  You work as a Network Administrator for TechMart Inc. The company has a Windows-based network. After completing a security audit of the company's Microsoft Windows Server 2008 R2 file servers, you have determined that folder and share security requires a revision on the basis of corporate reorganization. You have noticed that some shares on the file system are not secured. Which of the following is a feature that you will use to reassign permissions without assigning permissions to every parent and child folder?

  A. Inheritance
  B. Kerberos
  C. TCP/IP protocol
  D. User Account Control (UAC)
  A. Inheritance

  ---

  Inheritance is defined as the concept of permissions that are propagated to an object from a parent object. It is found in both file system permissions and Active Directory permissions and does not work with share permissions. It is used to reassign permissions without assigning permissions to every parent and child folder Answer: B is incorrect. Kerberos is defined as a secure method used for authenticating a request for a service in a computer network. Answer: D is incorrect. User Account Control (UAC) is used to prevent unauthorized changes to computers on the domain. Answer: C is incorrect. TCP/IP protocol is used to define the rule computers are required to follow for communicating with each other over the internet.