Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 11:

  You work as a security manager for Company Inc. An individual is connecting to your corporate internal network over the Internet. You have to ensure that he is not an intruder masquerading as an authorized user. Which of the following technologies will you use to accomplish the task?

  A. Two-factor authentication
  B. IP address packet filtering
  C. Intrusion detection system (IDS)
  D. Embedded digital signature
  A. Two-factor authentication

  ---

  Two-factor authentication offers an extra security mechanism above that offered by passwords alone. It is frequently used by mobile users who want to establish connectivity to a corporate network.

• Question 12:

  Which provides the highest level of security in a firewall?

  A. Stateful inspection
  B. Outbound packet filters
  C. Stateless inspection
  D. Inbound packet filters
  A. Stateful inspection

• Question 13:

  Media Access Control (MAC) filtering enables you to:

  A. limit access to a network based on the client computer's network adapter.
  B. set access permissions to a shared folder.
  C. prevent communications between specific IP addresses.
  D. restrict communications to a specific website.
  A. limit access to a network based on the client computer's network adapter.

• Question 14:

  In Internet Explorer 8, the InPrivate Browsing feature prevents:

  A. Unauthorized private data input.
  B. Unencrypted communication between the client computer and the server.
  C. User credentials from being sent over the Internet.
  D. Any session data from being stored on the computer.
  D. Any session data from being stored on the computer.

  ---

  Reference: http://windows.microsoft.com/en-us/windows/what-is-inprivate-browsing

• Question 15:

  Which of the following security features of IE 7+ makes it more difficult for malware to be installed?

  A. Security zones
  B. Phishing filter
  C. Protected mode
  D. Pop-up blocker
  C. Protected mode

  ---

  The protected mode feature of IE 7+ prevents a computer from saving the files or programs of a Web site. The Protected mode makes it more difficult for malware to be installed. In case such a program is installed, it makes it difficult for the program to damage a user's file and the other operating system files. Protected mode is enabled by default for Internet, local intranet, and restricted sites. However, it is not enabled for the trusted sites. Answer: B is incorrect. The Phishing filter of IE 7+ provides protection from online phishing attacks, frauds, and spoofed Web sites. The filter helps determine whether a Web site is a legitimate site or a phishing site. The filter blocks the Web sites and cautions the users about both reported and suspected phishing Web sites. Answer: D is incorrect. A pop-up blocker allows users to block most pop-ups while surfing the Internet on their computers. Users can select the level of blocking; hey can either block all pop-up windows, or allow pop-ups that they want to see. Answer: A is incorrect. IE 7+ provides a user the facility of configuring security through the security zones. It allows a user or systems administrator to categorize Web sites that a user visits into several groups with a suitable security level.

• Question 16:

  Which of the following is a program that runs at a specific date and time to cause unwanted and unauthorized functions?

  A. Keylogger
  B. Logic bomb
  C. Spyware
  D. Trojan horse
  B. Logic bomb

  ---

  A logic bomb is a malicious program that executes when a predetermined event occurs. For example, a logic bomb can execute when a user logs on to a computer or presses certain keys on the keyboard. It can also execute on a particular

  date or time specified by developers.

  Answer: D is incorrect. Trojan horse is a malicious software program code that masquerades itself as a normal program. When a Trojan horse program is run, its hidden code runs to destroy or scramble data on the hard disk. An example of a

  Trojan horse is a program that masquerades as a computer logon to retrieve user names and password information. The developer of a Trojan horse can use this information later to gain unauthorized access to computers. Trojan horses are

  normally spread by e-mail attachments. Unlike viruses, Trojan horses do not replicate themselves but only destroy information on hard disks. Answer: A is incorrect. A keylogger is a software tool that traces all or specific activities of a user on

  a computer. Once a keylogger is installed on a victim's computer, it can be used for recording all keystrokes on the victim's computer in a predefined log file. An attacker can configure a log file in such a manner that it can be sent automatically

  to a predefined e-mail address. Some of the main features of a keylogger are as follows:

  It can record all keystrokes.

  It can capture all screenshots.

  It can record all instant messenger conversations. It can be remotely installed.

  It can be delivered via FTP or e-mail.

  Answer: C is incorrect. Spyware is a computer program that collects all the information on the computer user and sends it to another computer or destination. It is used for monetary gain. It may have several ways of making money by using

  the information obtained. It tries to violate the privacy of the computer without causing damage to the computer or the software installed on it.

• Question 17:

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 18:

  You are an intern for a company where your manager wants to be sure you understand the social engineering threats that may occur. Your manager emphasizes the principles of the Microsoft Defense-in-Depth Security Model shown in the following image:

  

  Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 19:

  Which of the following viruses cannot be detected by signature-based antivirus?

  A. Macro virus
  B. Boot sector virus
  C. MBR virus
  D. Polymorphic virus
  D. Polymorphic virus

  ---

  A polymorphic virus has the ability to change its own signature at the time of infection. This virus is very complicated and hard to detect. When the user runs the infected file in the disk, it loads the virus into the RAM. The new virus starts making its own copies and infects other files of the operating system. The mutation engine of the polymorphic virus generates a new encrypted code, thus changing the signature of the virus. Therefore, polymorphic viruses cannot be detected by signature-based antivirus. Answer: A is incorrect. A macro virus is a virus that consists of a macro code which infects the system. A Macro virus can infect a system rapidly. Since this virus has VB event handlers, it is dynamic in nature and displays random activation. The victim has only to open a file having a macro virus in order to infect the system with the virus. DMV, Nuclear, and Word Concept are some good examples of macro viruses. Answer: C is incorrect. A Master boot record (MBR) virus replaces the boot sector data with its own malicious code. Every time when the computer starts up, the boot sector virus executes. It can then generate activity that is either annoying (system will play sounds at certain times) or destructive (erase the hard drive of the system). Because the code in the Master Boot Record executes before any operating system is started, no operating system can detect or recover from corruption of the Master Boot Record. Answer: B is incorrect. A boot sector virus infects the master boot files of the hard disk or floppy disk. Boot record programs are responsible for booting the operating system and the boot sector virus copies these programs into another part of the hard disk or overwrites these files. Therefore, when the floppy or the hard disk boots, the virus infects the computer.

• Question 20:

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area: