Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 231:

  Setting a minimum password age restricts when users can:

  A. Request a password reset
  B. Change their passwords
  C. Log on by using their passwords
  D. Set their own password expiration
  B. Change their passwords

  ---

  Configure the minimum password age to be more than 0 if you want Enforce password history to be effective. Without a minimum password age, users can cycle through passwords repeatedly until they get to an old favorite.

• Question 232:

  Kerberos prevents:

  A. Denial of Service attacks
  B. spyware distribution
  C. file corruption
  D. replay attacks
  D. replay attacks

• Question 233:

  The default password length for a Windows Server domain controller is:

  B. 5
  C. 7
  D. 14
  C. 7

• Question 234:

  Which of the following is the edge between the private and locally managed-and- owned side of a network and the public side that is commonly managed by a service provider?

  A. Internet
  B. Network perimeter
  C. Intranet
  D. VLAN
  B. Network perimeter

  ---

  A network perimeter is the edge between the private and locally managed-and-owned side of a network and the public side that is commonly managed by a service provider. In an efficient enterprise security design, the network perimeter offers a great opportunity for enhancing the security position of a network. The network perimeter consists of a Border Network and a Perimeter Network; each assumes an enforcement point within the network perimeter with each having a exclusive responsibility in the perimeter security model.

  Answer: C is incorrect. An intranet is a private network that is contained within an enterprise. Intranet is used to share company information and computing resources among employees. It is also used to facilitate working in groups and for teleconferencing. An intranet uses TCP/IP, HTTP, and other Internet protocols. Answer: D is incorrect. A VLAN is a broadcast domain created by a switch. Each broadcast domain connected to interfaces of the switch is known as a separate VLAN. A VLAN should be configured when a LAN has lots of traffic or more than 200 devices. It is also required when groups of users need more security or when a group of users has the same type of work and needs to be on the same broadcast domain. Answer: A is incorrect. Internet is a global network of computers, connected to each other using the TCP/IP protocol. Internet sites are available to all users. The Internet, sometimes called simply "the Net," is a worldwide system of computer networks - a network of networks in which users at any one computer can, if they have permission, get information from any other computer (and sometimes talk directly to users at other computers). It was conceived by the Advanced Research Projects Agency (ARPA) of the U.S. government in 1969 and was first known as the ARPANET. Today, the Internet is a public, cooperative, and self-sustaining facility accessible to hundreds of millions of people worldwide. Physically, the Internet uses a portion of the total resources of the currently existing public telecommunication networks. Technically, what distinguishes the Internet is its use of a set of protocols called TCP/IP (for Transmission Control Protocol/Internet Protocol).

• Question 235:

  Which of the following is the most common method for an attacker to spoof email?

  A. Back door
  B. Replay attack
  C. Man-in-the-middle attack
  D. Open relay
  D. Open relay

  ---

  An open relay is the most common method for an attacker to spoof email. An open relay is an SMTP mail server configured in such a way that it allows anyone on the Internet to send e-mail through it. By processing mail that is neither for nor from a local user, an open relay makes it possible for a spammer to route large volumes of spam. Answer: C is incorrect. Man-in-the-middle attacks occur when an attacker successfully inserts an intermediary software or program between two communicating hosts. The intermediary software or program allows attackers to listen to and modify the communication packets passing between the two hosts. The software intercepts the communication packets and then sends the information to the receiving host. The receiving host responds to the software, presuming it to be the legitimate client. Answer: A is incorrect. A backdoor is a program or account that allows access to a system by skipping the security checks. Many vendors and developers implement backdoors to save time and effort by skipping the security checks while troubleshooting. A backdoor is considered to be a security threat and should be kept with the highest security. If a backdoor becomes known to attackers and malicious users, they can use it to exploit the system. Answer: B is incorrect. A replay attack is a type of attack in which attackers capture packets containing passwords or digital signatures whenever packets pass between two hosts on a network. In an attempt to obtain an authenticated connection, the attackers then resend the captured packet to the system. In this type of attack, the attacker does not know the actual password, but can simply replay the captured packet.

• Question 236:

  To implement WPA2 Enterprise, you would need a/an:

  A. RADIUS server
  B. SSL server
  C. WEP server
  D. VPN server
  A. RADIUS server

• Question 237:

  Mark works as a Network Administrator for NetTech Inc. The company has a Windows Server 2008 domain-based network. The network uses Network Access Protection (NAP). The company's employees at the remote locations are connecting to the company's network from their Windows Vista clients. Mark wants to ensure that the data transmission between a client computer and the company's network is as secure as possible. What will Mark do to accomplish the task?

  A. Use Encrypting File System (Efs) between the client computer and the company's network.
  B. Use IPSec NAP policy between client computer and the company's network.
  C. Use VPN connection with MS-CHAP v2 between the client computer and the company's network.
  D. Use NAP enforcement for DHCP.
  B. Use IPSec NAP policy between client computer and the company's network.

  ---

  In order to accomplish the task, Mark will have to use IPSec NAP policy between the client computer and the company's network. Using the IPSec NAP policy between client computer and the company's network will provide the strongest security for data transmission. IPSec enforcement provides the strongest form of NAP enforcement. Because this enforcement method uses IPsec, the administrator can define requirements for protected communications on a per-IP address or per- TCP/UDP port number basis. Answer: A is incorrect. Encrypting File System (Efs) cannot work on the network. Answer: C is incorrect. According to the Question ensure that the data transmission between the client computer and the company's network is as secure as possible. Hence, this solution will not fulfill the requirement. Answer: D is incorrect. Using DHCP enforcement, DHCP servers and Network Policy Server (NPS) can enforce health policy when a computer attempts to lease or renew an IP version 4 (IPv4) address.

• Question 238:

  Your company requires that users type a series of characters to access the wireless network.

  The series of characters must meet the following requirements: Contains more than 15 characters Contains at least one letter Contains at least one number Contains at least one symbol

  Which security technology meets these requirements?

  A. WEP
  B. WPA2 PSK
  C. WPA2 Enterprise
  D. MAC filtering
  B. WPA2 PSK

  ---

  Explanation: Pre-shared key mode (PSK, also known as Personal mode) is designed for home and small office networks that don't require the complexity of an 802.1X authentication server.[9] Each wireless network device encrypts the network traffic using a 256 bit key. This key may be entered either as a string of 64 hexadecimal digits, or as a passphrase of 8 to 63 printable ASCII characters

• Question 239:

  You are an intern at Litware, Inc. Your manager asks you to make password guess attempts harder by limiting login attempts on company computers. What should you do?

  A. Enforce password sniffing.
  B. Enforce password history.
  C. Make password complexity requirements higher.
  D. Implement account lockout policy.
  D. Implement account lockout policy.

  ---

  Reference: http://technet.microsoft.com/en-us/library/dd277400.aspx

• Question 240:

  By default, what level of security is set for the Local intranet zone?

  A. High-Medium
  B. Medium-Low
  C. High
  D. Low
  B. Medium-Low

  ---

  The default security level of the Local intranet zone is Medium-Low. Internet Explorer (IE) allows configuring different levels of security for different types of Web sites by segmenting them into the following security zone:

  Local Intranet: IE can be configured to detect intranet sites automatically. Users can add Web sites to this zone through Local Intranet sites dialog box. Protected Mode is not enabled for sites in this zone. The default security level of this zone

  is Medium- Low.

  Trusted Sites: Putting sites in the Trusted Sites zone often provide elevated privileges. The default security level for this zone is Medium. Restricted Sites: Potentially malicious sites are put in this zone. The default security level for this zone is

  High. Protected Mode is enabled by default for sites in this zone. Internet: The sites that are not contained in other zones are automatically hosted in this zone. Sites in this zone are blocked from viewing private data from other Web sites. The

  default security level of this zone is Medium-High. Protected Mode is enabled by default for sites in this zone.

  The three default security levels are Medium, Medium-High, and High.