Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 41:

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point.

  Hot Area:

  

  

• Question 42:

  Which of the following is a secret numeric password shared between a user and a system for authenticating the user to the system?

  A. Key escrow
  B. Public key
  C. Private key
  D. PIN
  D. PIN

  ---

  A personal identification number (PIN) is a secret numeric password shared between a user and a system for authenticating the user to the system. Answer: A is incorrect. Key escrow is an arrangement in which the keys needed to decrypt encrypted data are held in escrow so that, under certain circumstances, an authorized third party may gain access to those keys. These third parties may include businesses, who may want access to employees' private communications, or governments, who may wish to be able to view the contents of encrypted communications. Answer: C is incorrect. In cryptography, a private or secret key is an encryption/decryption key known only to the party or parties that exchange secret messages. In traditional secret key cryptography, a key would be shared by the communicators so that each could encrypt and decrypt messages. Answer: B is incorrect. A Public Key is known commonly to everybody. It is used to encrypt data. Only specific users can decrypt it. Data encryption is used to encrypt data so that it can only be decrypted with the corresponding private key owned by the public key owner. The public key is also used to verify digital signatures. This signature is created by the associated private key.

• Question 43:

  Windows Server Update Services (WSUS) is a tool that:

  A. Updates data stored in Windows servers
  B. Manages the services that run on a server
  C. Updates licensing for Windows servers
  D. Manages updates for Microsoft software
  D. Manages updates for Microsoft software

  ---

  Windows Server Update Services (WSUS) enables information technology administrators to deploy the latest Microsoft product updates to computers that are running the Windows operating system. By using WSUS, administrators can fully manage the distribution of updates that are released through Microsoft Update to computers in their network. Reference: http://technet.microsoft.com/en-us/windowsserver/bb332157.aspx

• Question 44:

  You work as a Network Administrator for TechMart Inc. The company has a Windows-based network. After completing a security audit of the company's Microsoft Windows Server 2008 R2 file servers, you have determined that folder and share security requires a revision on the basis of corporate reorganization. You have noticed that some shares on the file system are not secured. Which of the following will you use to prevent unauthorized changes to computers on the domain?

  A. TCP/IP protocol
  B. Kerberos
  C. User Account Control (UAC)
  D. Lightweight Directory Access Protocol
  C. User Account Control (UAC)

  ---

  User Account Control (UAC) is used to prevent unauthorized changes to computers on the domain Answer: B is incorrect. Kerberos is defined as a secure method used for authenticating a request for a service in a computer network. Answer: D is incorrect. The Lightweight Directory Access Protocol (LDAP) is defined as a directory service protocol that is used to provide a mechanism used to connect to, search, and modify Internet directories. Answer: A is incorrect. TCP/IP protocol is used to define the rule computers are required to follow for communicating with each other over the internet.

• Question 45:

  Your anti-spam program is blocking emails from a particular sender. Your company needs to receive emails from this sender.

  What should you do?

  A. Accept RSS feeds from their domain
  B. List the sender's email address in DNS
  C. Add the email addresses to the whitelist
  D. Reconfigure the SMS Gateway
  C. Add the email addresses to the whitelist

• Question 46:

  The manager of a coffee shop hires you to securely set up WiFi in the shop.

  To keep computer users from seeing each other, what should you use with an access point?

  A. Client bridge mode
  B. Client isolation mode
  C. MAC address filtering
  D. Client mode
  B. Client isolation mode

  ---

  Wireless Client Isolation is a unique security feature for wireless networks. When Client Isolation is enabled any and all devices connected to the wireless LAN will be unable to talk to each other.

• Question 47:

  Which of the following is a mechanism that allows authentication of dial-in and other network connections?

  A. VPN
  B. NTFS
  C. RADIUS
  D. Single Sign-On
  C. RADIUS

  ---

  RADIUS is a mechanism that allows authentication of dial-in and other network connections. RADIUS is a client/server protocol that runs in the application layer, using UDP as transport. The Remote Access Server, the Virtual Private Network server, the Network switch with port-based authentication, and the Network Access Server are all gateways that control access to the network, and all have a RADIUS client component that communicates with the RADIUS server. The RADIUS server is usually a background process running on a UNIX or Windows NT machine. RADIUS serves three functions: To authenticate users or devices before granting them access to a network To authorize those users or devices for certain network services To account for usage of those services Answer: D is incorrect. Single Sign-On is an approach which involves a server that acts as an online certificate authority within a single sign-on system. A single sign-on server will issue digital certificates into the client system, but never stores them. Users can execute programs, etc. with the temporary certificate. It is common to find this solution variety with x.509-based certificates. Answer: B is incorrect. NTFS is a high-performance file system proprietary to Microsoft. NTFS supports file-level security, compression, and auditing. It also supports large volumes and powerful storage solution such as RAID. The latest feature of NTFS is its ability to encrypt files and folders to protect sensitive data. Answer: A is incorrect. A virtual private network (VPN) is a form of wide area network (WAN) that supplies network connectivity over a possibly long physical distance. A virtual private network is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or individual users with secure access to their organization's network. A virtual private network can be contrasted with an expensive system of owned or leased lines that can only be used by one organization. The goal of a VPN is to provide the organization with the same capabilities, but at a much lower cost. A VPN works by using the shared public infrastructure while maintaining privacy through security procedures and tunneling protocols such as the Layer Two Tunneling Protocol (L2TP). In effect, the protocols, by encrypting data at the sending end and decrypting it at the receiving end, send the data through a tunnel that cannot be entered by data that is not properly encrypted. An additional level of security involves encrypting not only the data, but also the originating and receiving network addresses.

• Question 48:

  When conducting a security audit the first step is to: A. Inventory the company's technology assets

  B. Install auditing software on your servers
  C. Set up the system logs to audit security events
  D. Set up a virus quarantine area
  A

• Question 49:

  What is the standard or basic collection of NTFS permissions?

  A. Read and execute, read, write, full control, modify, list folder contents
  B. Change permissions, read permissions, write permissions
  C. Read attributes, list folder/read data, traverse folder/execute file
  D. Create files/write data, create folders/append data, take ownership
  A. Read and execute, read, write, full control, modify, list folder contents

  ---

  Reference: http://technet.microsoft.com/en-us/library/bb727008.aspx

• Question 50:

  Which of the following describes a VLAN?

  A. It connects multiple networks and routes data packets.
  B. It is a logical broadcast domain across physical subnets.
  C. It is a subnetwork that reveals a company's externally facing resources to the public network.
  D. It allows different network protocols to communicate between different network segments.
  B. It is a logical broadcast domain across physical subnets.

  ---

  VLAN (Virtual Local Network) is a logically separate IP subnetwork which allow multiple IP networks and subnets to exist on the same-switched network. VLAN is a logical broadcast domain that can span multiple physical LAN segments. It is a modern way administrators configure switches into virtual local-area networks (VLANs) to improve network performance by separating large Layer 2 broadcast domains into smaller ones.