Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 191:

  DRAG DROP

  Certain potentially harmful file types should be filtered as attachments of incoming email messages.

  Match the file extension that should be filtered with its description.

  Instructions: To answer, drag the appropriate file extension from the column on the left to its description on the right. Each file extension may be used once, more than once, or not at all. You may need to drag the split bar between panes or

  scroll to view content.

  Note: For each correct selection is worth one point.

  Select and Place:

  

  

• Question 192:

  Which of the following is an authentication protocol?

  A. Kerberos
  B. LDAP
  C. TLS
  D. PPTP
  A. Kerberos

  ---

  Kerberos is an industry standard authentication protocol used to verify user or host identity. Kerberos v5 authentication protocol is the default authentication service for Windows 2000. It is integrated into the administrative and security model,

  and provides secure communication between Windows 2000 Server domains and clients.

  Answer: C is incorrect. Transport Layer Security (TLS) is an application layer protocol that uses a combination of public and symmetric key processing to encrypt data.

  Answer: B is incorrect. Lightweight Directory Access Protocol (LDAP) is a protocol used to query and modify information stored within directory services. Answer: D is incorrect. Point-to-Point Tunneling Protocol (PPTP) is a method for

  implementing virtual private networks. PPTP does not provide confidentiality or encryption. It relies on the protocol being tunneled to provide privacy. It is used to provide secure, low-cost remote access to corporate networks through public

  networks such as the Internet. Using PPTP, remote users can use PPP- enabled client computers to dial a local ISP and connect securely to the corporate network through the Internet. PPTP has been made obsolete by Layer 2 Tunneling

  Protocol (L2TP) and IPSec.

• Question 193:

  Which of the following is a tool that can be used to evaluate the servers having vulnerabilities that are related to the operating system and installed software?

  A. DNS dynamic update
  B. Windows Software Update Services
  C. Read-Only domain controller (RODC)
  D. Microsoft Baseline Security Analyzer
  D. Microsoft Baseline Security Analyzer

  ---

  Microsoft Baseline Security Analyzer is a tool that can be used to evaluate the servers having vulnerabilities that are related to the operating system and installed software Microsoft Baseline Security Analyzer (MBSA) is a software tool of

  Microsoft to determine security state by assessing missing security updates and less- secure security settings within Microsoft Windows, Windows components such as Internet Explorer, IIS web server, and products Microsoft SQL Server,

  and Microsoft Office macro settings. Microsoft Baseline Security Analyzer (MBSA) includes a graphical and command line interface that can perform local or remote scans of Windows systems.

  Answer: B is incorrect. Windows Server Update Services (WSUS) is an add- on component of Windows Server 2008. It provides functionality to a server to run as a Windows Update server in a Windows network environment. Administrators

  can configure a WSUS server as the only server to download updates from Windows site, and configure other computers on the network to use the server as the source of update files. This will save lots of bandwidth as each computer will not

  download updates individually. WSUS 3.0 SP1 is the only version of WSUS that can be installed on Windows Server 2008. Earlier versions of WSUS cannot be installed on a server running Windows Server 2008.

  Answer: C is incorrect. Read-only Domain Controller (RODC) is a domain controller that hosts the read-only partition of the Active Directory database. RODC was developed by Microsoft typically to be deployed in a branch office environment.

  RODC is a good option to enhance security by placing it in a location where physical security is poor. RODC can also be placed at locations having relatively few users and a poor network bandwidth to the main site. As only the read-only

  partition of the Active Directory database is hosted by RODC, a little local IT knowledge is required to maintain it.

  Answer: A is incorrect. DNS dynamic update is used to enable DNS client computers for registering and dynamically updating their resource records with a DNS server whenever any modification or change has been taken place. It is used to

  update the DNS client computers with the reflecting changes.

• Question 194:

  The reason for implementing Service Set IDentifier (SSID) masking is to:

  A. enforce a more secure password policy
  B. hide a wireless network name from unknown computers
  C. hide a network share from unauthorized users
  D. disable autologon
  B. hide a wireless network name from unknown computers

• Question 195:

  A Virtual Private Network (VPN) is a/an:

  A. Intrusion Prevention System that filters unauthorized communications in the enterprise network
  B. virtual communication method that stores data transmitted in a private environment
  C. tunnel that prevents information that passes through it from being modified or stolen
  D. perimeter network that contains secure virtual servers
  C. tunnel that prevents information that passes through it from being modified or stolen

• Question 196:

  Mark work as a System Administrator for TechMart Inc. The company has a Windows-based network. Mark wants to allow the remote travel agents to be able to access the corporate network so that they are free to check email and post appointments that are booked for the particular day. Mark has decided to permit the travel agents to use their home computers but he is required to be assured that the information is not compromised by anyone because the security of client information is on the top priority for him. Which of the following is a potential risk if the travel agents will use their home computers for VPN access?

  A. VPN handles everything and encrypts the data.
  B. VPN does not allow the travel agents to use their home computers.
  C. VPN cannot prevent buffer overflow on the home computer from infecting the network.
  D. VPN cannot prevent potential viruses and malware on the home computer from infecting the network.
  D. VPN cannot prevent potential viruses and malware on the home computer from infecting the network.

  ---

  In the above scenario, a potential risk is a viruses and malware attack because a VPN does not prevent potential viruses and malware attack on the home computer from being infecting the entire network. Mark can use the Direct Access that is a new feature with Windows 7 and Windows Server 2008 R2, to help in mitigating the potential risks. Answer: C is incorrect. Buffer overflow is a condition in which an application receives more data than it is configured to accept. It helps an attacker not only to execute a malicious code on the target system but also to install backdoors on the target system for further attacks. All buffer overflow attacks are due to only sloppy programming or poor memory management by the application developers. The main types of buffer overflows are: Stack overflow Format string overflow Heap overflow Integer overflow

• Question 197:

  HOTSPOT

  You are setting up the wireless network for your class.

  Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 198:

  HOTSPOT

  You are helping your classmates with their password settings.

  Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  

• Question 199:

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 200:

  The primary purpose of Network Access Protection (NAP) is to prevent:

  A. Loss of data from client computers on a network.
  B. Non-compliant systems from connecting to a network.
  C. Users on a network from installing software.
  D. Unauthorized users from accessing a network.
  B. Non-compliant systems from connecting to a network.

  ---

  NAP enforces health policies by inspecting and assessing the health of client computers, restricting network access when client computers are noncompliant with health policy, and remediating noncompliant client computers to bring them into compliance with health policy before they are granted full network access. NAP enforces health policies on client computers that are attempting to connect to a network; NAP also provides ongoing health compliance enforcement while a client computer is connected to a network. Reference: http://technet.microsoft.com/en-us/library/cc754378(v=ws.10).aspx