Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 181:

  You are a network administrator.

  All computers run the Microsoft Edge browser.

  You need to prevent web cookies from being saved.

  What should you enforce?

  A. SmartScreen Filter
  B. InPrivate Browsing
  C. Antivirus protection
  D. Cross-Site Scripting Filter
  B. InPrivate Browsing

• Question 182:

  Installing uninterruptible power sources to your servers is an example of ensuring:

  A. integrity
  B. a backup strategy
  C. availability
  D. accessibility
  A. integrity

• Question 183:

  Which of the following protocols is used to secure workstation and computer authentication across the network?

  A. TCP/IP
  B. Network Directory Access Protocol
  C. Kerberos
  D. Lightweight Directory Access Protocol
  C. Kerberos

  ---

  Kerberos is defined as a secure method used for authenticating a request for a service in a computer network.

  Answer: D is incorrect. The Lightweight Directory Access Protocol (LDAP) is defined as a directory service protocol that is used to provide a mechanism used to connect to, search, and modify Internet directories. Answer: A is incorrect. TCP/

  IP protocol is used to define the rule computers are required to follow for communicating with each other over the internet.

  Answer: B is incorrect. This is an invalid Answer: .

• Question 184:

  Mark works as a Network Administrator fot Blue Well Inc. The company has a Windows-based network. Mark is facing a series of problems with email spam and identifying theft via phishing scams. He wants to implement the various security measures and to provide some education because it is related to the best practices while using email. Which of the following can Mark use to minimize the spam amount that is hitting the Microsoft Exchange server of the company?

  A. Enable reverse DNS lookup
  B. Use Read-only Domain Controller
  C. Add Sender Policy Framework
  D. Permit User Account Control
  A. Enable reverse DNS lookup

  ---

  To minimize the amount of spam that is hitting the Microsoft Exchange server, it is required to enable reverse DNS lookup on the SMTP virtual server. It forces a system to crosscheck the domain name with a PTR record (IP address

  associated with the domain name) and if the IP address is not matched the record associated with that domain name, it will not delivered.

  Answer: C is incorrect. SPF is used to permit the administrator to configure the server to establish who is acceptable to send email from their domain. Answer: D is incorrect. User Account Control (UAC) is a technology and security

  infrastructure introduced with Microsoft's Windows Vista and Windows Server 2008 operating systems, with a more relaxed version also present in Windows 7 and Windows Server 2008 R2. It aims to improve the security of Microsoft

  Windows by limiting application software to standard user privileges until an administrator authorizes an increase or elevation.

  Answer: B is incorrect. Read-only Domain Controller (RODC) is a domain controller that hosts the read-only partition of the Active Directory database. RODC was developed by Microsoft typically to be deployed in a branch office environment.

  RODC is a good option to enhance security by placing it in a location where physical security is poor. RODC can also be placed at locations having relatively few users and a poor network bandwidth to the main site. As only the read-only

  partition of the Active Directory database is hosted by RODC, a little local IT knowledge is required to maintain it.

• Question 185:

  Which of the following are required to enable for preventing the users from downloading and installing software from the Internet? Each correct answer represents a complete solution. Choose all that apply.

  A. Software restriction policies
  B. PTR record
  C. User Account Control
  D. Anti-Virus software
  A. Software restriction policies
  C. User Account Control

  ---

  Answer: C and A

  It is required to enable User Account Control on all Windows 7 computers and to configure software restriction policies to prevent the users from downloading and installing software from the Internet.

• Question 186:

  Which of the following MMC snap-in consoles is used to administer the replication of directory data among all sites in an Active Directory Domain Services (AD DS) forest?

  A. Active Directory Domains and Trusts
  B. Active Directory Administrative Center
  C. Group Policy Management Console
  D. Active Directory Sites and Services
  D. Active Directory Sites and Services

  ---

  The Active Directory Sites and Services MMC snap-in console is used to administer the replication of directory data among all sites in an Active Directory Domain Services (AD DS) forest.

  Answer: A is incorrect. The Active Directory Domains and Trusts console is used to administer domain trusts, domain and forest functional levels, and user principal name (UPN) suffixes.

  Answer: B is incorrect. Active Directory Administrative Center is used to administer and publish information in the directory, including managing users, groups, computers, etc.

  Answer: C is incorrect. Group Policy Management Console (GPMC) is used to provide a single administrative tool for managing Group Policy across the enterprise.

• Question 187:

  Mark works as a Security Officer for TechMart Inc. The company has a Windows- based network. He has bees assigned a project for ensuring the safety of the customer's money and information, not to mention the company's reputation. The company has gone through a security audit to ensure that it is in compliance with industry regulations and standards. Mark understands the request and has to do his due diligence for providing any information the regulators require as they are targeting potential security holes. In this situation, his major concern is the physical security of his company's system. He has a concern that people are authenticated to the servers in the data center. Which of the following actions will Mark take to prevent normal users from logging onto the systems?

  A. Call a team member while behaving to be someone else for gaining access to sensitive information.
  B. Use group policies to disable the use of floppy drives or USB drives.
  C. Provide protection against a Distributed Denial of Services attack.
  D. Develop a social awareness of security threats within an organization.
  B. Use group policies to disable the use of floppy drives or USB drives.

  ---

  To prevent normal users from logging onto the systems, it is required to create a group policy that can be applied to the servers to Deny Log on Locally for all non- administrative users. It will create a problem for the people who are in the data

  center with physical access. However, normal users should not have the ability to log on locally.

  Answer: C While stressing the Con?dentiality, Integrity, and Availability triangle in the training of users, the process of providing availability is related to security training to ensure the protection against a Distributed Denial of Services attack.

• Question 188:

  You are preparing an audit policy for the workstations at Contoso, Ltd. Currently, no advanced auditing is enabled. The workstations are not members of the domain. The settings of your Advanced Audit Policy Configuration are shown in the following image:

  

  Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 189:

  You check the logs on several clients and find that there is traffic coming in on an odd port (port 1872). All clients have the Windows XP firewall turned on. What should you do to block this unwanted traffic?

  A. Perform a virus scan to find the virus responsible for this traffic.
  B. Check the exceptions in the firewall and unselect that port exception.
  C. Trace back that traffic and find its origin.
  D. Shut down the service that connects to that port.
  B. Check the exceptions in the firewall and unselect that port exception.

  ---

  The Windows firewall has an exception list of applications and ports that are allowed to pass through the firewall. Find this port and remove it from the exception list.

• Question 190:

  HOTSPOT

  You are setting up BitLocker on a new computer.

  Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Note: For each correct selection is worth one point.

  Hot Area: