Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 161:

  What is the primary advantage of using Active Directory Integrated Zones?

  A. Zone encryption
  B. Password protection
  C. Non-repudiation
  D. Secure replication
  D. Secure replication

  ---

  Reference: http://books.google.com/books?id=CXy-2LBZCVgCandpg=PA201anddq=%22Active+Directory+Integrated+Zones%22,+Secure+replicationandhl=enandsa=Xandei=9s92U-v1KI-zyASjzILIDgandved=0CE0Q6AEwAQ#v=onepageandq=%22Active %20Directory%20Integrated%20Zones%22%2C%20Secure%20replicationandf=false

• Question 162:

  Which attack listens to network traffic of a computer resource?

  A. Resource gathering
  B. Denial of service
  C. ARP poisoning
  D. Eavesdropping
  E. Logic bomb
  D. Eavesdropping

  ---

  Eavesdropping In general, the majority of network communications occur in an unsecured or "cleartext" format, which allows an attacker who has gained access to data paths in your network to "listen in" or interpret (read) the traffic. When an attacker is eavesdropping on your communications, it is referred to as sniffing or snooping. The ability of an eavesdropper to monitor the network is generally the biggest security problem that administrators face in an enterprise. Without strong encryption services that are based on cryptography, your data can be read by others as it traverses the network.

• Question 163:

  The primary method of authentication in an SSL connection is passwords.

  To answer, choose the option "No change is needed" if the underlined text is correct. If the underlined text is not correct, choose the correct answer.

  A. No change is needed
  B. Certificates
  C. IPsec
  D. Biometrics
  B. Certificates

  ---

  Reference: https://www.geocerts.com/ssl/understanding_authentication

• Question 164:

  You need to be able to gather information about a running program.

  Which type of auditing should you implement?

  A. directory services
  B. object access
  C. logon events
  D. process tracking
  D. process tracking

• Question 165:

  Which of the following is a name that identifies a particular 802.11 wireless LAN?

  A. MBSA
  B. IBSS
  C. MAC
  D. SSID
  D. SSID

  ---

  Service Set Identifier, or SSID, is a name that identifies a particular 802.11 wireless LAN. A client device receives broadcast messages from all access points within range, advertising their SSIDs. The client device can then either manually or automatically, based on configuration, select the network and can associate itself. The SSID can be up to 32 characters long. As the SSID displays to users, it normally consists of human-readable characters. The SSID is defined as a sequence of 1-32 octets, each of which may take any value. Answer: B is incorrect. IBSS (Independent Basic Service Set) is an ad-hoc network of client devices that does not require a central control access point. In IBSS, the SSID is chosen by the client device that starts the communication. The broadcasting of the SSID is performed in a pseudo-random order by all devices that are members of the network. Answer: C is incorrect. Mandatory access control (MAC) refers to a type of access control by which the operating system constrains the ability of a subject or initiator to access or generally perform some sort of operation on an object or target. In practice, a subject is usually a process or thread; objects are constructs such as files, directories, TCP/UDP ports, shared memory segments, etc. Subjects and objects each have a set of security attributes. Whenever a subject attempts to access an object, an authorization rule enforced by the operating system kernel examines these security attributes and decides whether the access can take place. Any operation by any subject on any object will be tested against the set of authorization rules to determine if the operation is allowed. Answer: A is incorrect. Microsoft Baseline Security Analyzer (MBSA) is a software tool of Microsoft to determine security state by assessing missing security updates and less-secure security settings within Microsoft Windows, Windows components such as Internet Explorer, IIS web server, and products Microsoft SQL Server, and Microsoft Office macro settings. Microsoft Baseline Security Analyzer (MBSA) includes a graphical and command line interface that can perform local or remote scans of Windows systems.

• Question 166:

  A mail system administrator scans for viruses in incoming emails to increase the speed of mail processing.

  Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

  A. Decrease the chances of a virus getting to a client machine
  B. Verify that the senders of the messages are legitimate
  C. Ensure that all links in the messages are trustworthy
  D. No change is needed.
  A. Decrease the chances of a virus getting to a client machine

• Question 167:

  E-mail bombing attacks a specific entity by:

  A. Redirecting all e-mail to another entity
  B. Sending high volumes of e-mail
  C. Tracing e-mail to the destination address
  D. Triggering high levels of security alerts
  B. Sending high volumes of e-mail

  ---

  In Internet usage, an email bomb is a form of net abuse consisting of sending huge volumes of email to an address in an attempt to overflow the mailbox or overwhelm the server where the email address is hosted in a denial-of-service attack.

• Question 168:

  Which two characteristics should you recommend for a user's domain password? (Choose two.)

  A. Hard to guess
  B. Includes Unicode characters
  C. Easy to remember
  D. Easy to increment
  A. Hard to guess
  C. Easy to remember

  ---

  Reference: http://www.usewisdom.com/computer/passwords.html

• Question 169:

  The Windows Firewall protects computers from unauthorized network connections.

  Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed'' if the underlined text makes the statement correct.

  A. Email viruses
  B. Phishing scams
  C. Unencrypted network access
  D. No change is needed
  D. No change is needed

• Question 170:

  The purpose of Microsoft Baseline Security Analyzer is to:

  A. List system vulnerabilities.
  B. Apply all current patches to a server.
  C. Set permissions to a default level.
  D. Correct a company's security state.
  A. List system vulnerabilities.