Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 31:

  Which of the following helps prevent security failures?

  A. Social engineering
  B. Denial-of-Service attack
  C. Attack surface reduction
  D. Snooping
  C. Attack surface reduction

  ---

  The attack surface is a software environment where codes can be run by unauthenticated users. By improving information security, the attack surface of a system or software can be reduced. Although attack surface reduction helps prevent

  security failures; it does not mitigate the amount of damage an attacker could inflict once a vulnerability is found.

  Answer: B is incorrect. A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a computer or network. It is also known as network saturation attack or bandwidth consumption attack.

  Attackers make DoS attacks by sending a large number of protocol packets to a network. The problems caused by a DoS attack are as follows: Saturate network resources.

  Disrupt connections between two computers, thereby preventing communications between services.

  Disrupt services to a specific computer.

  Answer: D is incorrect. Snooping is an activity of observing the content that appears on a computer monitor or watching what a user is typing. Snooping also occurs by using software programs to remotely monitor activity on a computer or

  network device. Hackers or attackers use snooping techniques and equipment such as keyloggers to monitor keystrokes, capture passwords and login information, and to intercept e-mail and other private communications. Sometimes,

  organizations also snoop their employees legitimately to monitor their use of organizations' computers and track Internet usage.

  Answer: A is incorrect. Social engineering is the art of convincing people and making them disclose useful information such as account names and passwords. This information is further exploited by hackers to gain access to a user's

  computer or network. This method involves mental ability of people to trick someone rather than their technical skills. A user should always distrust people who ask him for his account name, password, computer name, IP address, employee

  ID, or other information that can be misused.

• Question 32:

  Which of the following ports is used by the IMAP4 protocol?

  A. 443
  B. 53
  C. 143
  D. 110
  C. 143

  ---

  Port 143 is used by the IMAP4 protocol.

  Answer: A is incorrect. Port 443 is used by the HTTPS protocol.

  Answer: B is incorrect. Port 53 is used by DNS. Answer: D is incorrect. Port 110 is used by the POP3 protocol.

• Question 33:

  What are two reasons to implement VLANs? (Choose two.)

  A. Manage traffic flow between the Internet and the network
  B. Create the most secure path between two hosts
  C. Enable grouping of hosts regardless of physical location
  D. Separate hosts on the same network
  B. Create the most secure path between two hosts
  C. Enable grouping of hosts regardless of physical location

• Question 34:

  Which of the following protects against unauthorized access to confidential information via encryption and works at the network layer?

  A. Firewall
  B. NAT
  C. IPSec
  D. MAC address
  C. IPSec

  ---

  Internet Protocol security (IPSec) protects against data manipulation and unauthorized access to confidential information via encryption and works at the network layer. IPSec provides machine-level authentication as well as data encryption. It is used for VPN connections that use the L2TP protocol. It secures both data and password. Answer: B is incorrect. NAT also works at the network layer, but it does not provide encryption for data

• Question 35:

  Setting a database to run on a cluster of servers is an example of applying:

  A. accessibility
  B. availability
  C. confidentially
  D. integrity
  A. accessibility

• Question 36:

  Which of the following security features of IE 7+ helps determine whether a Web site is a legitimate site?

  A. Protected mode
  B. Pop-up blocker
  C. Security zones
  D. Phishing filter
  D. Phishing filter

  ---

  The Phishing filter of IE 7+ provides protection from online phishing attacks, frauds, and spoofed Web sites. The filter helps determine whether a Web site is a legitimate site or a phishing site. The filter blocks the Web sites and cautions the users about both reported and suspected phishing Web sites. Answer: B is incorrect. A Pop-up blocker allows users to block most pop-ups while surfing the Internet on their computers. The users can select the level of blocking; they can either block all pop- up windows or allow pop-ups that they want to see. Answer: A is incorrect. The protected mode feature of IE 7+ prevents a computer from saving the files or programs of a Web site. The protected mode makes it more difficult for malware to be installed. In case such a program is installed, it makes it difficult for the program to damage a user's file and the other operating system files. Protected mode is enabled by default for Internet, local intranet, and restricted sites. However, it is not enabled for the trusted sites. Answer: C is incorrect. IE 7+ provides a user the facility of configuring security through the security zones. It allows a user or systems administrator to categorize Web sites that a user visits into several groups with a suitable security level.

• Question 37:

  Encrypting a hard disk is an example of ensuring:

  A. security be default
  B. confidentially
  C. integrity
  D. least privilege
  B. confidentially

• Question 38:

  Which of the following is a method of capturing and recording computer users' keystrokes including sensitive passwords?

  A. Using hardware keyloggers
  B. Using Alchemy Remote Executor
  C. Using SocketShield
  D. Using Anti-virus software
  A. Using hardware keyloggers

  ---

  Hardware keyloggers are used for keystroke logging, a method of capturing and recording computer users' keystrokes, including sensitive passwords. They can be implemented via BIOS-level firmware, or alternatively, via a device plugged

  inline between a computer keyboard and

  a computer. They log all keyboard activities to their internal memory. Answer: D is incorrect. Anti-Virus software is used to prevent, detect, and remove malware, including computer viruses, worms, and trojan horses. Such programs may also

  prevent and remove adware, spyware, and other forms of malware.

  Anti-Virus software is a class of program that searches your hard drive, floppy drive, and pen drive for any known or potential viruses. The market for this kind of program has expanded because of Internet growth and the increasing use of the

  Internet by businesses concerned about protecting their computer assets. Popular Anti-Virus packages are as follows: Bit Defender Anti-Virus McAfee Virus Scan Kaspersky Anti-Virus F-Secure Anti-Virus Symantec Norton Anti-Virus Panda

  Titanium Anti-Virus Avira Anti-Virus Avast Anti-Virus Trend Micro Anti-Virus Grisoft AVG Anti-Virus ESET Nod32 Anti-Virus Webroot Anti-Virus Quick Heal Anti-Virus eTrust EZ Anti-Virus ZoneAlarm Anti-Virus

  Answer: B is incorrect. Alchemy Remote Executor is a system management tool that allows Network Administrators to execute programs on remote network computers without leaving their workplace. From the hacker's point of view, it can be

  useful for installing keyloggers, spyware, Trojans, Windows rootkits and such. One necessary condition for using the Alchemy Remote Executor is that the user/attacker must have the administrative passwords of the remote computers on

  which the malware is to be installed.

  Answer: C is incorrect. SocketShield provides a protection shield to a computer system against malware, viruses, spyware, and various types of keyloggers. SocketShield provides protection at the following two levels:

  1.Blocking: In this level, SocketShield uses a list of IP addresses that are known as purveyor of exploits. All http requests for any page in these domains are simply blocked.

  2.Shielding: In this level, SocketShield blocks all the current and past IP addresses that are the cause of unauthorized access.

• Question 39:

  This question requires that you evaluate the underlined text to determine if it is correct.

  An example of physical security for a laptop is a/an cable lock.

  Instructions: Review the underlined text. If it makes the statement correct, select "No change is needed." If the statement is incorrect, select the answer choice that makes the statement correct.

  A. docking station
  B. fingerprint reader
  C. external USB drive
  D. No change is needed
  D. No change is needed

• Question 40:

  Malicious software designed to collect personally identifiable information is referred to as :

  A. spyware
  B. a cookie
  C. a network sniffer
  D. freeware
  A. spyware