Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 221:

  Physically securing servers prevents:

  A. Theft
  B. Compromise of the certificate chain
  C. Man-in-the middle attacks
  D. Denial of Service attacks
  A. Theft

• Question 222:

  You work as a Network Administrator for McRobert Inc. Your company has a TCP/IP-based network. You plan to connect your company's LAN to the Internet. You are concerned about the security of your network and want to protect it against external access and misuse. Which device will you install between your LAN and the Internet to accomplish this?

  Select and Place:

  

  

• Question 223:

  You want to make your computer resistant to online hackers and malicious software. What should you do?

  A. Configure a forward proxy.
  B. Install anti-virus software.
  C. Enable spam filtering.
  D. Turn on Windows Firewall.
  B. Install anti-virus software.

• Question 224:

  You sign up for an online bank account. Every 6 months, the bank requires you to change your password. You have changed your password 5 times in the past. Instead of coming up with a new password, you decide to use one of your past passwords, but the bank's password history prevents you on doing so.

  Select the correct answer if the underlined text does not make the statement correct Select "No change is needed" if the underlined text makes the statement correct.

  A. Minimum password age
  B. Maximum password duration
  C. Password complexity
  D. No change is needed.
  D. No change is needed.

• Question 225:

  You need to grant a set of users write access to a file on a network share. You should add the users to:

  A. A security group
  B. The Authenticated Users group
  C. The Everyone group
  D. A distribution group
  B. The Authenticated Users group

• Question 226:

  Passwords that contain recognizable words are vulnerable to a:

  A. Denial of Service attack
  B. Hashing attack
  C. Dictionary attack
  D. Replay attack
  C. Dictionary attack

  ---

  A dictionary attack is a method of breaking into a password-protected computer or server by systematically entering every word in a dictionary as a password. A dictionary attack can also be used in an attempt to find the key necessary to decrypt an encrypted message or document.

  Dictionary attacks work because many computer users and businesses insist on using ordinary words as passwords. Dictionary attacks are rarely successful against systems that employ multiple-word phrases, and unsuccessful against systems that employ random combinations of uppercase and lowercase letters mixed up with numerals. Reference: http://searchsecurity.techtarget.com/definition/dictionary-attack

• Question 227:

  Mark works as a Systems Administrator for TechMart Incl. The company has Windows-based network. Mark has been assigned a project to track who tries to log into the system and the time of the day at which the attempts occur. He is also required to create a system to track when confidential files are opened and who is trying to open it. Now, Mark logs when someone is not able to make a successful attempt to log into the system as Administrator but he also wants to log when the user is successful to log into the system as Administrator. Which of the following is the reason of logging by Mark when a user is successfully logged into the system as well as when he is failed?

  A. To determine if and when someone is authenticating successfully with high privilege.
  B. To make sure that user is not using the Administrator account.
  C. To determine if and when someone is authenticating successfully with high privilege.
  D. To make sure that user is not facing any problem.
  C. To determine if and when someone is authenticating successfully with high privilege.

  ---

  In the above scenario, Mark is required to determine if and when someone is able to be authenticated successfully with high privilege as well as the hacker activity. If any user was failed for a number of times and was then successful any attempt, it can be a hacker activity. That's why Mark logs when a user is successfully logged into the system as well as when he is failed.

• Question 228:

  Where should you lock up the backup tapes for your servers?

  A. The server room
  B. A filing cabinet
  C. The tape library
  D. An offsite fire safe
  D. An offsite fire safe

  ---

  Backup tapes should be stored off site, preferably in a fire safe, so that the data is available should a fire, flood, or other disaster affect the location were the servers are.

• Question 229:

  You manage 50 Windows workstations in a computer lab. All workstations belong to the lab Active Directory domain.

  You need to implement several audit policies on each workstation in the shortest time possible.

  What should you do?

  A. Enable logging on each computer
  B. Create a domain Group Policy
  C. Turn on the Audit Policy on the domain controller
  D. Enable Audit object access
  B. Create a domain Group Policy

  ---

  References:

  https://docs.microsoft.com/en-us/windows-server/networking/branchcache/deploy/use-group-policy-to- configure-domain-member-client-computers

• Question 230:

  The Graphic Design Institute hires you to help them set up a server for their 20-person team.

  As a general practice of hardening the server, you start by performing which two tasks? (Choose two.)

  A. Disable the guest account.
  B. Rename the admin account.
  C. Remove the account lockout policy.
  D. Format partitions with FAT32.
  A. Disable the guest account.
  B. Rename the admin account.