Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 211:

  What is an example of non-propagating malicious code?

  A. A back door
  B. A hoax
  C. A Trojan horse
  D. A worm
  A. A back door

• Question 212:

  Which of the following is used to describe the policy of maximum password age?

  A. It is used to determine how old the user has to create a password.
  B. It is a time duration before a password is required to be public.
  C. It is a time duration before a password is required to be changed.
  D. It determines how old the password must be before the user is permitted to change it.
  C. It is a time duration before a password is required to be changed.

  ---

  The policy of maximum password age defines a time duration before a password is required to be changed.

• Question 213:

  You work as a Network Administrator for NetTech Inc. Your computer has the Windows 2000 Server operating system. You want to harden the security of the server. Which of the following changes are required to accomplish this? Each correct answer represents a complete solution. Choose two.

  A. Enable the Guest account.
  B. Rename the Administrator account.
  C. Remove the Administrator account.
  D. Disable the Guest account.
  B. Rename the Administrator account.
  D. Disable the Guest account.

  ---

  Answer: B and D For security, you will have to rename the Administrator account and disable the Guest account. Renaming the Administrator account will ensure that hackers do not break into the network or computer by guessing the password of the Administrator account. You can also create a fake Administrator account that has no privileges and audit its use to detect attacks. Disabling the Guest account will prevent users who do not have a domain or local user account from illegally accessing the network or computer. By default, the Guest account is disabled on systems running Windows 2000 Server. If the Guest account is enabled, you will have to disable it.

• Question 214:

  Mark works as a Network Administrator for TechMart Inc. The company has a Windows-based network. Mark wants to implement stronger authentication measures for the customers, as well as eliminate IT staff from logging on with high privileges. Mark has various options, but he is required to keep the processes easy for the helpdesk staff. Which of the following is a service can the staff uses as an alternative of signing in with elevate privileges?

  A. Secondary Logon-Run As
  B. Security log
  C. Hardware firewall
  D. Encrypted network configuration
  A. Secondary Logon-Run As

  ---

  Secondary Logon (Run As) is defined as a starting programs and tools in local administrative context. Windows secondary logon is used to permit administrators to log on with a non-administrative account and be able to perform the several administrative tasks without logging off by using trusted administrative programs in administrative contexts. Answer: B is incorrect. The security log is generated by a firewall or other security device. It is used to define list of events that could affect the security of data or infrastructure, such as access attempts or commands, and the names of the users participating in this illegal process. Answer: C is incorrect. Hardware firewall is defined as the important part of the system and network set-up on a broadband connection. It can be effective with small or no configuration, and is used to protect every machine on a local network. The hardware firewalls will have at least four network ports for connecting to other computers. This type of firewall uses packet filtering for checking the header of a packet in order to check its source and destination. The information obtained in this manner is compared to a set of predefined or user-created rules and then the packet is forwarded or dropped.

• Question 215:

  Which of the following is the reason of properly securing an audit log?

  A. To ensure that only authorized person can check the log file.
  B. To ensure that no one can remove it as there is no back up is provided for this log.
  C. To ensure that potential hackers becomes unable to delete the event logs for covering their tracks.
  D. To ensure that potential hackers can be tracked easily without changing the network configuration.
  C. To ensure that potential hackers becomes unable to delete the event logs for covering their tracks.

  ---

  The reason of properly securing an audit log is used to ensure that potential hackers becomes unable to delete the event logs for covering their tracks.

• Question 216:

  Which two security settings can be controlled by using group policy? (Choose two.)

  A. Password complexity
  B. Access to the Run... command
  C. Automatic file locking
  D. Encrypted access from a smart phone
  A. Password complexity
  B. Access to the Run... command

  ---

  Reference: http://technet.microsoft.com/en-us/library/cc875814.aspx

• Question 217:

  You need to limit the programs that can run on client computers to a specific list. Which technology should you implement?

  A. Windows Security Center
  B. Security Accounts Manager
  C. System Configuration Utility
  D. AppLocker group policies
  A. Windows Security Center

• Question 218:

  Which of the following is a physical address stored in the Network Interface card on your system or any other device residing on your network?

  A. IP address
  B. I/O address
  C. MAC Address
  D. Broadcast address
  C. MAC Address

  ---

  MAC address is a physical address stored in the Network Interface card on your system or any other device residing on your network. A Media Access Control (MAC) address is a numerical identifier that is unique for each network interface card (NIC). MAC addresses are 48-bit values expressed as twelve hexadecimal digits, usually divided into hyphen-separated pairs, for example, FF-00-F8-32-13-19. The MAC address consists of two parts. The first three pairs are collectively known as the Organizationally Unique Identifier (OUI). The remaining part is known as the device ID. The OUI is administered by IEEE. MAC addresses are also referred to as hardware addresses, Ethernet addresses, and universally administered addresses (UAAs). Answer: D is incorrect. Broadcast address is a special kind of IP address that is used to send packets to all the devices on a same segment of a network. For IP broadcasts, broadcast address is the address in which the host portion of the IP address consists of either all 0's or all 255's. For MAC broadcasts, all of the bet positions in the address are enabled, making the address FFFF.FFFF.FFFF in hexadecimal. Answer: A is incorrect. An IP address is a four-byte number that uniquely identifies a computer on a TCP/IP network. It is made up of 32 bits of information. These bits are divided into four sections, each section containing one byte (8 bits), also known as an octet. Each node on the TCP/IP network must be assigned a unique IP address. There are two types of IP addresses, i.e., Private and Public. Answer: B is incorrect. I/O address is a communication port between a device and the CPU. The CPU needs a memory address, known as Input/ Output (I/O) address, to communicate with any peripheral device. I/O address is a hexadecimal number that the CPU uses to identify a device. I/O address allows the CPU to send instructions to devices installed on the bus slot of a computer. Resources such as I/O addresses, IRQs, and DMAs are configurable aspects of communication between devices inside a PC. Whenever a component, such as a sound card or internal modem is installed in a PC, its I/O address, IRQ, and DMA channels must be correctly configured.

• Question 219:

  Creating MD5 hash for files is an example of ensuring what?

  A. Confidentiality
  B. Availability
  C. Least privilege
  D. Integrity
  D. Integrity

  ---

  The MD5 message-digest algorithm is a widely used cryptographic hash function producing a 128-bit (16-byte) hash value, typically expressed in text format as a 32 digit hexadecimal number. MD5 has been utilized in a wide variety of cryptographic applications, and is also commonly used to verify data integrity.

• Question 220:

  Mark works as a Network Administrator fot Blue Well Inc. The company has a Windows-based network. Mark is facing a series of problems with email spam and identifying theft via phishing scams. He wants to implement the various security measures and to provide some education because it is related to the best practices while using email. Which of the following will Mark ask to employees of his company to do when they receive an email from a company they know with a request to click the link to "verify their account information"?

  A. Provide the required information
  B. Hide the email
  C. Use Read-only Domain Controller
  D. Delete the email
  D. Delete the email

  ---

  In the above scenario, Mark will ask his employees to delete the email whenever he receives an email from a company that they know with to click the link to "verify their account information", because companies do not ask for account

  information via email now a days.

  Answer: C is incorrect. Read-only Domain Controller (RODC) is a domain controller that hosts the read-only partition of the Active Directory database. RODC was developed by Microsoft typically to be deployed in a branch office environment.

  RODC is a good option to enhance security by placing it in a location where physical security is poor. RODC can also be placed at locations having relatively few users and a poor network bandwidth to the main site. As only the read-only

  partition of the Active Directory database is hosted by RODC, a little local IT knowledge is required to maintain it.