Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 141:

  What is a service set identifier (SSID)?

  A. A wireless encryption standard
  B. The wireless LAN transmission type
  C. The broadcast name of an access point
  D. A wireless security protocol
  C. The broadcast name of an access point

  ---

  SSID (service set identifier) is a function performed by an Access Point that transmits its name so that wireless stations searching for a network connection can 'discover' it. It's what allows your wireless adapter's client manager program or Windows built-in wireless software to give you a list of the Access Points in range.

• Question 142:

  An attorney hires you to increase the wireless network security for the law firm's office. The office has a very basic network, with just a modem and a router. Which of these security modes offers the highest security?

  A. WPA-Personal
  B. WEP
  C. WPA2-Personal
  D. WPA-Enterprise
  C. WPA2-Personal

• Question 143:

  What are three ways you can reduce the number of opportunities that attackers have to exploit potential weaknesses or vulnerabilities? (Choose three.)

  A. Employ layered defenses
  B. Elevate all accounts to administrator accounts
  C. Apply the principle of least privilege
  D. Employ content filtering for web browsers
  E. Restrict access to system services
  C. Apply the principle of least privilege
  D. Employ content filtering for web browsers
  E. Restrict access to system services

• Question 144:

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 145:

  Mark works as a Systems Administrator for TechMart Inc. The company has a Windows-based network. The company is adding an open, high-speed, wireless access for their customers and secured wireless for employees at all 37 branches. He wants to check the various security concerns for ensuring that business traffic is secured. He is also in under pressure to make this new feature a winning strategy for a company. Mark wants the employees to be free to troubleshoot their own wireless connections before contacting him. Which of the following is the basic troubleshooting step that he can ask them to do?

  A. To power cycle the wireless access points and then reboot the systems.
  B. To configure the network to use only Extensible Authentication Protocol (EAP).
  C. To reboot the computers they are using and then use the MAC filtering.
  D. To right-click the network icon in the system tray and then select Troubleshoot Problems.
  D. To right-click the network icon in the system tray and then select Troubleshoot Problems.

  ---

  The basic troubleshooting step that Mark can ask his employees is to right-click the network icon in the system tray and then select Troubleshoot Problems. Answer: B is incorrect. Extensible Authentication Protocol (EAP) is defined as an authentication framework providing for the transport and usage of keying material and parameters that are generated by EAP methods. EAP is not a wire protocol and it defines only message formats.

• Question 146:

  Which of the following contains a tree of domain names?

  A. Domain name space
  B. Domain name formulation
  C. Domain Name System
  D. Authoritative name server
  A. Domain name space

  ---

  Domain name space consists of a tree of domain names. Each node or leaf in the tree has zero or more resource records, which hold information associated with the domain name. The tree sub- divides into zones starting at the root zone.

  Answer: B is incorrect. The definitive descriptions of the rules for forming domain names appear in RFC 1035, RFC 1123, and RFC 2181. A domain name consists of one or more parts, technically called labels that are conventionally

  concatenated, and delimited by dots.

  Answer: C is incorrect. Domain Name System (DNS) is a distributed hierarchical naming system for computers, services, or other resources connected to the Internet or a private network. It associates various information with domain names

  assigned to each of the participants.

  Answer: D is incorrect. An authoritative name server is a name server that gives answers that have been configured by an original source, for example, the domain administrator or by dynamic DNS methods, in contrast to the answers that

  were obtained via a regular DNS query to one more name server. An authoritative-only name server only returns answers to the queries about domain names that have been specifically configured by the administrator.

• Question 147:

  Which of the following can be installed for ensuring that the domain is secure in the remote locations?

  A. Read-Only domain controller (RODC)
  B. Microsoft Baseline Security Analyzer
  C. Windows Software Update Services
  D. DNS dynamic update
  A. Read-Only domain controller (RODC)

  ---

  Read-only Domain Controller (RODC) is a domain controller that hosts the read-only partition of the Active Directory database. RODC was developed by Microsoft typically to be deployed in a branch office environment. RODC is a good option to enhance security by placing it in a location where physical security is poor. RODC can also be placed at locations having relatively few users and a poor network bandwidth to the main site. As only the read-only partition of the Active Directory database is hosted by RODC, a little local IT knowledge is required to maintain it. Answer: C is incorrect. Windows Server Update Services (WSUS) is an add- on component of Windows Server 2008. It provides functionality to a server to run as a Windows Update server in a Windows network environment. Administrators can configure a WSUS server as the only server to download updates from Windows site, and configure other computers on the network to use the server as the source of update files. This will save lots of bandwidth as each computer will not download updates individually. WSUS 3.0 SP1 is the only version of WSUS that can be installed on Windows Server 2008. Earlier versions of WSUS cannot be installed on a server running Windows Server 2008. Answer: D is incorrect. DNS dynamic update is used to enable DNS client computers for registering and dynamically updating their resource records with a DNS server whenever any modification or change has been taken place. It is used to update the DNS client computers with the reflecting changes. Answer: B is incorrect. Microsoft Baseline Security Analyzer (MBSA) is a software tool of Microsoft to determine security state by assessing missing security updates and less-secure security settings within Microsoft Windows, Windows components such as Internet Explorer, IIS web server, and products Microsoft SQL Server, and Microsoft Office macro settings. Microsoft Baseline Security Analyzer (MBSA) includes a graphical and command line interface that can perform local or remote scans of Windows systems.

• Question 148:

  Email spoofing:

  A. obscures the true email sender
  B. copies email messages sent from a specific user
  C. modifies email routing logs
  D. forwards email messages to all contacts
  A. obscures the true email sender

  ---

  References: https://searchsecurity.techtarget.com/definition/email-spoofing

• Question 149:

  To protect systems from buffer overflow errors, you can use:

  A. Antivirus software
  B. Data Execution Prevention
  C. A proxy server
  D. An Intruder Prevention System
  B. Data Execution Prevention

• Question 150:

  John works as a Network Administrator for We-are-secure Inc. The We-are-secure server is based on Windows Server 2003. One day, while analyzing the network security, he receives an error message that Kernel32.exe is encountering a problem. Which of the following steps should John take as a countermeasure to this situation? Each correct answer represents a complete solution. Choose all that apply.

  A. He should restore his Windows settings.
  B. He should upgrade his antivirus program.
  C. He should observe the process viewer (Task Manager) to see whether any new process is running on the computer or not. If any new malicious process is running, he should kill that process.
  D. He should download the latest patches for Windows Server 2003 from the Microsoft site, so that he can repair the kernel.
  B. He should upgrade his antivirus program.
  C. He should observe the process viewer (Task Manager) to see whether any new process is running on the computer or not. If any new malicious process is running, he should kill that process.

  ---

  Answer: B and C

  In such a situation, when John receives an error message revealing that Kernel32.exe is encountering a problem, he needs to come to the conclusion that his antivirus program needs to be updated, because Kernel32.exe is not a Microsoft

  file (It is a Kernel32.DLL file.).

  Although such viruses normally run on stealth mode, he should examine the process viewer (Task Manager) to see whether any new process is running on the computer or not. If any new process (malicious) is running on the server, he

  should exterminate that process.

  Answer: A and D are incorrect. Since kernel.exe is not a real kernel file of Windows, there is no need to repair or download any patch for Windows Server 2003 from the Microsoft site to repair the kernel.

  Note: Such error messages can be received if the computer is infected with malware, such as Worm_Badtrans.b, Backdoor.G_Door, Glacier Backdoor, Win32.Badtrans.29020, etc.