Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 201:

  You are setting up Remote Desktop on your computer. Your computer is a member of a domain. Your firewall configuration is shown in the following image:

  

  You need to allow Remote Desktop to be able to get through your firewall for users on your company's network. Which settings should you enable?

  A. Remote Assistance: Home/Work (Private)
  B. Remote Desktop: Public
  C. Remote Desktop: Home/Work (Private)
  D. Remote Assistance: Domain
  A. Remote Assistance: Home/Work (Private)

• Question 202:

  Mark works as a Network Administrator for NetTech Inc. The company has a Windows Server 2008 domain-based network. Mark configures Network Access Protection (NAP) on the network. He then configures secure wireless access to the network from all access points on the network. He also configures 802.1x authentication for accessing the network. Mark wants to ensure that all computers connecting to the network are checked by NAP for the required configuration and update status. What will Mark do to accomplish the task?

  A. Configure all computers connecting to the network with IPSec.
  B. Configure all access points as RADIUS clients to Distributed File System.
  C. Configure Link-local Multicast Name Resolution (LLMNR) on the network.
  D. Configure all access points as RADIUS clients to Network Policy Server (NPS).
  D. Configure all access points as RADIUS clients to Network Policy Server (NPS).

  ---

  In order to accomplish the task, Mark will have to configure all access points as RADIUS clients to Network Policy Server (NPS). Network Access Protection (NAP) is a set of operating system components included with the Windows Server 2008 and Windows Vista/7 operating systems. It ensures that the client computers on a private network meet administrator-defined requirements for system health. NAP policies define the required configuration and update status for a client computer's operating system and critical software. For example, an administrator can set policies that computers might be required to have antivirus software with the latest virus definition installed and current operating system updates. Using NAP, a network administrator can enforce compliance with health requirements for the client computers connection to the network. NAP helps network administrators to reduce the risk caused by improperly configured client computers that might be exposed to viruses and other malicious software. Network Policy Server (NPS) is a Remote Authentication Dial-In User Service (RADIUS) server and proxy in Windows Server 2008. It allows administrator to create and enforce network access policies for client health, connection request authentication, and connection request authorization. It can be used to centrally manage network access through a variety of network access servers, including wireless access points, VPN servers, dial-up servers, and 802.1X authenticating switches. NPS can also be used to deploy secure password authentication with Protected Extensible Authentication Protocol (PEAP)-MS-CHAP v2 for wireless connections. Answer B is incorrect. Distributed file system (Dfs) is a network server component: that makes it easier for users to find files and resources on distributed enterprise networks. It permits the linking of servers and shares into a simpler, more meaningful name space. Dfs provides improved load sharing and data availability. Answer: A is incorrect. IPSec has nothing to do with the solution. Answer: C is incorrect. Configuring Link-local Multicast Name Resolution (LLMNR) on the network has nothing to do with the solution.

• Question 203:

  Which of the following actions should be taken so that the computer requires confirmation before installing an ActiveX component?

  A. Configuring a firewall on the network
  B. Configuring the settings on the Web Browser
  C. Installing an anti-virus software
  D. Configuring DMZ on the network
  B. Configuring the settings on the Web Browser

  ---

  Configuring the settings on the Web browser will enable a computer to ask for confirmation before installing an ActiveX component. This will enable users to prevent the download of potentially unsafe controls onto the computer. ActiveX

  controls are software components that can be integrated into Web pages and applications, within a computer or among computers in a network, to reuse the functionality. Reusability of controls reduces development time of applications and

  improves program interfaces.

  They enhance the Web pages with formatting features and animation. ActiveX controls can be used in applications written in different programming languages that recognize Microsoft's Component Object Model (COM). These controls

  always run in a container. ActiveX controls simplify and automate the authoring tasks, display data, and add functionality to Web pages.

  Answer: A and D are incorrect. Configuring a firewall or DMZ will not help in accomplishing the task.

• Question 204:

  What does implementing Windows Server Update Services (WSUS) allow a company to manage?

  A. Shared private encryption key updates
  B. Updates to Group Policy Objects
  C. Active Directory server replication
  D. Windows updates for workstations and servers
  D. Windows updates for workstations and servers

• Question 205:

  You are preparing a local audit policy for your workstation. No auditing is enabled. The settings of your policy are shown in the following image:

  

  Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 206:

  You are at school and logged in to a Windows 7 computer using a standard user account.

  You need to change some of the properties of a desktop icon for an assignment. Your instructor provides you with an administrator username and password and asks you to do two tasks.

  When you open the Need Admin Access Properties window, you see the following image:

  

  Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 207:

  You would implement a wireless intrusion prevention system to:

  A. Prevent wireless interference
  B. Detect wireless packet theft
  C. Prevent rogue wireless access points
  D. Enforce SSID broadcasting
  C. Prevent rogue wireless access points

  ---

  Reference: http://en.wikipedia.org/wiki/Wireless_intrusion_prevention_system

• Question 208:

  Basic security questions used to reset a password are susceptible to:

  A. Hashing
  B. Social engineering
  C. Network sniffing
  D. Trojan horses
  B. Social engineering

  ---

  Reference: http://en.wikipedia.org/wiki/Self-service_password_reset

• Question 209:

  Which of the following is a broadcast domain created by a switch?

  A. VLAN
  B. MAN
  C. DMZ
  D. VPN
  A. VLAN

  ---

  A VLAN is a broadcast domain created by a switch. Each broadcast domain connected to interfaces of the switch is known as a separate VLAN. A VLAN should be configured when a LAN has lots of traffic or more than 200 devices. It is also required when groups of users need more security or when a group of users has the same type of work and needs to be on the same broadcast domain. Answer: D is incorrect. A Virtual Private Network (VPN) is a computer network that is implemented in an additional software layer (overlay) on top of an existing larger network for the purpose of creating a private scope of computer communications or providing a secure extension of a private network into an insecure network such as the Internet. The links between nodes of a Virtual Private Network are formed over logical connections or virtual circuits between hosts of the larger network. The Link Layer protocols of the virtual network are said to be tunneled through the underlying transport network. Answer: C is incorrect. A demilitarized zone (DMZ) is a physical or logical subnetwork that contains and exposes external services of an organization to a larger network, usually the Internet. The purpose of a DMZ is to add an additional layer of security to an organization's Local Area Network (LAN); an external attacker only has access to equipment in the DMZ, rather than the whole of the network. Hosts in the DMZ have limited connectivity to specific hosts in the internal network, though communication with other hosts in the DMZ and to the external network is allowed. This allows hosts in the DMZ to provide services to both the internal and external networks, while an intervening firewall controls the traffic between the DMZ servers and the internal network clients. In a DMZ configuration, most computers on the LAN run behind a firewall connected to a public network such as the Internet. Answer: B is incorrect. Metropolitan Area Network (MAN) represents a network that connects two or more LANs in the same geographic area. A network connecting two different buildings or offices in the same city is an example of a MAN. The LANs involved in a MAN are connected to one another through high-speed connections such as T1, SONET, SDH, etc. A MAN is a hybrid of a LAN and a WAN. A WAN provides low to medium speed access, whereas a MAN provides high-speed access.

• Question 210:

  Network Access Protection (NAP) enables administrators to control access to network resources based on a computer's:

  A. Encryption level
  B. Warranty
  C. Physical location
  D. Configuration
  D. Configuration

  ---

  Network Access Protection (NAP) is a new set of operating system components included with the Windows Server?2008 and Windows Vista?operating systems that provides a platform to help ensure that client computers on a private network meet administrator-defined requirements for system health. NAP policies define the required configuration and update status for a client computer's operating system and critical software. For example, computers might be required to have antivirus software with the latest signatures installed, current operating system updates installed, and a host-based firewall enabled. By enforcing compliance with health requirements, NAP can help network administrators mitigate some of the risk caused by improperly configured client computers that might be exposed to viruses and other malicious software.