Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 21:

  Which of the following is a networking protocol that provides centralized Authentication, Authorization, and Accounting management for computers to connect and use a network service?

  A. PEAP
  B. RADIUS
  C. Kerberos
  D. MS-CHAP v2
  B. RADIUS

  ---

  Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service. Because of the

  broad support and the ubiquitous nature of the RADIUS protocol, it is often used by ISPs and enterprises to manage access to the Internet or internal networks, wireless networks, and integrated e-mail services. These networks may

  incorporate modems, DSL, access points, VPNs, network ports, Web servers, etc. RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server,

  the Network switch with port-based authentication, and the Network Access Server, are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS

  server is usually a background process running on a UNIX or Windows NT machine. RADIUS serves three functions:

  To authenticate users or devices before granting them access to a network To authorize those users or devices for certain network services To account for usage of those services

  Answer: D is incorrect. Microsoft Challenge Handshake Authentication Protocol version 2 (MS-CHAP v2) is the new version of MS-CHAP.

  MS-CHAP v2 provides the highest level of security and encryption for dial-up connection in the environment consisting of both Windows NT and Windows 2000/XP dial-up clients. It provides mutual authentication, stronger initial data

  encryption keys, and different encryption keys for sending and receiving data.

  Answer: A is incorrect. PEAP (Protected Extensible Authentication Protocol) is a method to securely transmit authentication information over wired or wireless networks. It was jointly developed by Cisco Systems, Microsoft, and RSA Security.

  PEAP is not an encryption protocol; as with other EAP protocols, it only authenticates a client into a network.

  PEAP uses server-side public key certificates to authenticate the server. It creates an encrypted SSL/TLS (Secure sockets layer/Transport

  layer security) tunnel between the client and the authentication server. In most configurations, the keys for this encryption are transported using the server's public key. The resultant exchange of authentication information inside the tunnel to

  authenticate the client is then encrypted and the user credentials are thus safe and secure. Answer: C is incorrect. Kerberos is a computer network authentication protocol that allows individuals communicating over a non- secure network to

  prove their identity to one another in a secure manner. Kerberos builds on symmetric key cryptography and requires a trusted third party. Kerberos uses as its basis the Needham-Schroeder protocol. It makes use of a trusted third party,

  termed a key distribution center (KDC), which consists of two logically separate parts:

  Authentication Server (AS)

  Ticket Granting Server (TGS)

  Kerberos works on the basis of tickets, which serve to prove the identity of users. The KDC maintains a database of secret keys; each entity on the network, whether a client or a server, shares a secret key known only to itself and to the KDC.

  Knowledge of this key serves to prove an entity's identity. For communication between two entities, the KDC generates a session key, which they can use to secure their interactions.

• Question 22:

  An employee where you work is unable to access the company message board in Internet Explorer. You review her Internet Options dialog box, as shown in the following image:

  

  Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 23:

  Which of the following is used to protect all files stored on the drive on which Windows is installed?

  A. SocketShield
  B. Firewall
  C. Bitlocker
  D. Hardware keylogger
  C. Bitlocker

  ---

  BitLocker is used to protect all files stored on the drive on which Windows is installed. It encrypts the entire system drive and helps block hackers from accessing the system files they rely on to discover user passwords. BitLocker also

  prevents hackers from accessing the hard disk by removing it from a computer, and installing it on a different computer. BitLocker does not work for USB Flash Drives. Answer:

  A is incorrect. SocketShield provides a protection shield to a computer system against malware, viruses, spyware, and various types of keyloggers. SocketShield provides protection at the following two levels:

  1.Blocking: In this level, SocketShield uses a list of IP addresses that are known as purveyor of exploits. All http requests for any page in these domains are simply blocked.

  2.Shielding: In this level, SocketShield blocks all the current and past IP addresses that are the cause of unauthorized access.

  Answer: B is incorrect. A firewall is a system that helps in preventing access to a system from unauthorized internet or network users. A firewall can be hardware as well as software. A firewall is implemented on systems that are connected to

  the internet and are vulnerable to hackers, viruses, worms, and other harmful intrusions. Answer: D is incorrect. Hardware keyloggers are used for keystroke logging, a method of capturing and recording computer users' keystrokes, including

  sensitive passwords. They can be implemented via BIOS-level firmware, or alternatively, via a device plugged inline between a computer keyboard and a computer. They log all keyboard activities to their internal memory.

• Question 24:

  You are an intern and are working remotely.

  You need a solution that meets the following requirements: Allows you to access data on the company network securely Gives you the same privileges and access as if you were in the office

  What are two connection methods you could use? (Choose two.)

  A. Forward Proxy
  B. Virtual Private Network (VPN)
  C. Remote Access Service (RAS)
  D. Roaming Profiles
  B. Virtual Private Network (VPN)
  D. Roaming Profiles

• Question 25:

  Which of the following practices should be followed to keep passwords secure? Each correct answer represents a complete solution. Choose three.

  A. Change the passwords whenever there is suspicion that they may have been compromised.
  B. A password should be alpha-numeric.
  C. A password should not be more than five words.
  D. Never write down a password.
  A. Change the passwords whenever there is suspicion that they may have been compromised.
  B. A password should be alpha-numeric.
  D. Never write down a password.

  ---

  Answer: D, A, and B

  The following practices should be followed to keep passwords secure: Never write down a password.

  Change the passwords whenever there is suspicion that they may have been compromised. A password should be alpha-numeric. Never use the same password for more than one account. Never tell a password to anyone, including people

  who claim to be from customer service or security.

  Never communicate a password by telephone, e-mail, or instant messaging. Ensure that an operating system password and application passwords are different. Make passwords completely random but easy for you to remember.

• Question 26:

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 27:

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 28:

  Dumpster diving refers to a physical threat that a hacker might use to look for information about a computer network.

  Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

  A. Phishing
  B. Malware
  C. Reverse Social engineering
  D. No change is needed
  D. No change is needed

• Question 29:

  A group of users has access to Folder A and all of its contents. You need to prevent some of the users from accessing a subfolder inside Folder A.

  What should you do first?

  A. Disable folder sharing
  B. Hide the folder
  C. Change the owner
  D. Block inheritance
  A. Disable folder sharing

• Question 30:

  What are three examples of factors required for multi-factor authentication? (Choose three.)

  A. a username
  B. a smart card
  C. a fingerprint
  D. a password challenge question
  E. a pin number
  A. a username
  C. a fingerprint
  E. a pin number

  ---

  References: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods