Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 151:

  Which of the following are the types of group scopes? Each correct answer represents a complete solution. Choose all that apply.

  A. Global
  B. Domain Users
  C. Universal
  D. Domain local
  A. Global
  C. Universal
  D. Domain local

  ---

  Answer: D, A, and C Following are the types of group scopes: 1.Domain local 2.Global 3.Universal

• Question 152:

  Windows Firewall is a built-in. host-based, stateless firewall.

  Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

  A. Stateful
  B. Network layer
  C. Packet filter
  D. No change is needed
  A. Stateful

• Question 153:

  Which of the following viruses cannot be detected by the signature-based antivirus?

  A. Polymorphic
  B. MBR virus
  C. Boot sector
  D. Macro
  A. Polymorphic

  ---

  A polymorphic virus has the ability to change its own signature at the time of infection. This virus is very complicated and hard to detect. When the user runs the infected file in the disk, it loads the virus into the RAM. The new virus starts making its own copies and infects other files of the operating system. The mutation engine of the polymorphic virus generates a new encrypted code, thus changing the signature of the virus. Therefore, polymorphic viruses cannot be detected by signature-based antivirus. Answer: B is incorrect. A Master boot record (MBR) virus replaces the boot sector data with its own malicious code. Every time when the computer starts up, the boot sector virus executes. It can then generate activity that is either annoying (system will play sounds at certain times) or destructive (erase the hard drive of the system). Because the code in the Master Boot Record executes before any operating system is started, no operating system can detect or recover from corruption of the Master Boot Record.

  Answer: D is incorrect. A macro virus is a virus that consists of a macro code which infects the system. A Macro virus can infect a system rapidly. Since this virus has VB event handlers, it is dynamic in nature and displays random activation. The victim has only to open a file having a macro virus in order to infect the system with the virus. DMV, Nuclear, and Word Concept are some good examples of macro viruses. Answer: C is incorrect. A boot sector virus infects the master boot files of the hard disk or floppy disk. Boot record programs are responsible for booting the operating system and the boot sector virus copies these programs into another part of the hard disk or overwrites these files. Therefore, when the floppy or the hard disk boots, the virus infects the computer.

• Question 154:

  What is a common method for password collection?

  A. Email attachments
  B. Back door intrusions
  C. SQL Injection
  D. Network sniffers
  D. Network sniffers

• Question 155:

  Which of the following are types of password policies of Windows 7? Each correct answer represents a complete solution. Choose all that apply.

  A. Store Password Using Reversible Encryption
  B. Minimum Password Length
  C. User Name Length
  D. Password Must Meet Complexity Requirements
  A. Store Password Using Reversible Encryption
  B. Minimum Password Length
  D. Password Must Meet Complexity Requirements

  ---

  Answer: B, A, and D Password policies are account policies that are related to user accounts. These policies increase the effectiveness of users' passwords by enforcing different types of controls on their usage. In Windows 7, there are following six types of password policies that can be configured by administrators: Enforce Password History Maximum Password Age Minimum Password Age Minimum Password Length Password Must Meet Complexity Requirements Store Password Using Reversible Encryption These options are disabled by default. However, an administrator can enable any option in the Local Security Settings tool, which can be accessed from the Administrative tools window found under Control Panel. Answer: C is incorrect. User name length does not come under password policies.

• Question 156:

  Which of the following is a security protocol that is used to protect data from being modified, corrupted, or accessed without authorization?

  A. Honeypot
  B. IP Security (IPsec)
  C. DNSSEC
  D. Protocol spoofing
  B. IP Security (IPsec)

  ---

  Internet Protocol Security (IPsec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a data stream. IPsec also includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used to protect data flows between a pair of hosts, between a pair of security gateways, or between a security gateway and a host. Answer: C is incorrect. Domain Name System Security Extensions (DNSSEC) is a suite of Internet Engineering Task Force (IETF) specifications for securing certain kinds of information provided by the Domain Name System (DNS) as used on Internet Protocol (IP) networks. It is a set of extensions to DNS which provide to DNS clients origin authentication of DNS data, authenticated denial of existence, and data integrity, but not availability or confidentiality. Answer: A is incorrect. A honey pot is a computer that is used to attract potential intruders or attackers. It is for this reason that a honey pot has low security permissions. A honey pot is used to gain information about the intruders and their attack strategies. Answer: D is incorrect. Protocol spoofing is used in data communications for enhancing the performance in situations where an currently working protocol is inadequate. In a computer security context, it refers to several forms of falsification of technically unrelated data.

• Question 157:

  You are trying to establish communications between a client computer and a server. The server is not responding.

  You confirm that both the client and the server have network connectivity.

  Which should you check next?

  A. Microsoft Update
  B. Data Execution Prevention
  C. Windows Firewall
  D. Active Directory Domains and Trusts
  D. Active Directory Domains and Trusts

• Question 158:

  Which of the following ports is used by the Remote Desktop Protocol?

  A. 80
  B. 23
  C. 3389
  D. 110
  C. 3389

  ---

  Port 3389 is used by the Remote Desktop Protocol. Answer: B is incorrect. Port 23 is used by the TELNET protocol. Answer: A is incorrect. Port 80 is used by the HTTP protocol. Answer: D is incorrect. Port 110 is used by the POP3 protocol.

• Question 159:

  The Active Directory controls, enforces, and assigns security policies and access rights for all users.

  Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

  A. NTFS permissions
  B. User Account Control
  C. Registry
  D. No change is needed
  D. No change is needed

• Question 160:

  You have a new computer and want to restrict other people from replacing the operating system.

  Which action prevents a user from installing an alternate operating system by using physical media if the user has physical media if the user has physical access to the computer?

  A. installing drive-level encryption
  B. disabling removable devices and drives
  C. password protecting the computer BIOS
  D. removing the user from the administrators group
  B. disabling removable devices and drives