Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 51:

  Which of the following is defined as a digitally signed statement used to authenticate and to secure information on open networks?

  A. Kerberos
  B. Public certificate
  C. Single sign-on (SSO)
  D. SEAL
  B. Public certificate

  ---

  A public certificate is defined as a digitally signed statement used to authenticate and to secure information on open networks Answer: C is incorrect. Single sign-on (SSO) is defined as a mechanism in which a single action of user authentication and authorization is used to allow a user to access all computers and systems where he got a access permission, without entering passwords for multiple times. Answer: A is incorrect. Kerberos is defined as a secure method used for authenticating a request for a service in a computer network. Answer: D is incorrect. SEAL is an alternative encryption algorithm to software- based DES, 3DES, and AES. It uses a 160-bit encryption key. SEAL provides less impact to the CPU than other software- based encryption algorithms. In Cisco IOS IPSec implementations, SEAL supports the SEAL algorithm. It can be configured through the command-line interface using the crypto ipsec transform-set command and the esp-seal transform option.

• Question 52:

  Which of the following are the main features of a key logger? Each correct answer represents a complete solution. Choose all that apply.

  A. It can be delivered via FTP or e-mail.
  B. It can record all keystrokes.
  C. It can capture all screenshots.
  D. It can detect viruses on the computer.
  A. It can be delivered via FTP or e-mail.
  B. It can record all keystrokes.
  C. It can capture all screenshots.

  ---

  Answer: A, B, and C

  A keylogger is a software tool that traces all or specific activities of a user on a computer. Once a keylogger is installed on a victim's computer, it can be used for recording all keystrokes on the victim's computer in a predefined log file. An

  attacker can configure a log file in such a manner that it can be sent automatically to a predefined e-mail address. Some of the main features of a keylogger are as follows:

  It can record all keystrokes.

  It can capture all screenshots.

  It can record all instant messenger conversations. It can be remotely installed.

  It can be delivered via FTP or e-mail.

  Answer: D is incorrect. It cannot detect viruses.

• Question 53:

  The name of a particular wireless LAN that is broadcast on a network is referred to as a:

  A. MAC address
  B. Basis Service Set (BSS)
  C. Wireless Access Point (WAP)
  D. Service Set Identifier (SSID)
  D. Service Set Identifier (SSID)

• Question 54:

  Which of following is required to be configured to ensure that the Bitlocker storage can be reclaimed?

  A. BitLocker to use data recovery agents
  B. BitLocker to use the password screen saver
  C. BitLocker to use the Secret Retrieval Agent
  D. BitLocker to use the Artificial Intelligence recovery option.
  A. BitLocker to use data recovery agents

  ---

  BitLocker to use data recovery agents is created and properly stored to ensure that the secured data can be reclaimed when the Bitlocker protected storage is shifted to another computer.

• Question 55:

  Mark works as a Desktop Administrator for TechMart Inc. The company has a Windows-based network. He has bees assigned a project to upgrade the browsers to Internet Explorer (IE) 8 for working with the latest Internet technologies Mark wants to ensure that the company uses a number of the security features built into the browser while maintaining functionality within the company's intranet. Mark is also educating his users to be good Internet citizens and use the safe web sur?ng. Mark asked his team to be assured that they are on a secured website. What they will do?

  A. Take a look for a padlock in the lower right corner of the browser and https:// in the address bar.
  B. Provide protection against a Distributed Denial of Services attack.
  C. Call a team member while behaving to be someone else for gaining access to sensitive information.
  D. Go into the Internet Options, select the Security, and add the intranet site to the list of Local Intranet Site.
  A. Take a look for a padlock in the lower right corner of the browser and https:// in the address bar.

  ---

  To be sure that the team members are on a secure site, they are required to look for a padlock in the lower right corner of the browser and https:// in the address bar. It will not guarantee that the site is secure but can be used. Answer: D is incorrect. The Internet zone feature in IE 8 can be configured and users are enabled to easily browse the local intranet without disturbing the security levels by using the following steps: 1.Go into the Internet Options and select the Security. 2.Add the intranet site to the list of Local Intranet Site. Answer: C is incorrect. Social engineering can be defined as any type of behavior used to inadvertently or deliberately aid an attacker in gaining access to an authorized user's password or other sensitive information. Social engineering is the art of convincing people and making them disclose useful information such as account names and passwords. This information is further exploited by hackers to gain access to a user's computer or network. This method involves mental ability of people to trick someone rather than their technical skills. A user should always distrust people who ask him for his account name, password, computer name, IP address, employee ID, or other information that can be misused. Answer: B While stressing the Con?dentiality, Integrity, and Availability triangle in the training of users, the process of providing availability is related to security training to ensure the protection against a Distributed Denial of Services attack.

• Question 56:

  Which of the following is the process used by attackers for listening to the network traffic?

  A. Eavesdropping
  B. Subnetting
  C. Sanitization
  D. Hacking
  A. Eavesdropping

  ---

  Eavesdropping is the process of listening to private conversations. It also includes attackers listening the network traffic. For example, it can be done over telephone lines (wiretapping), email, instant messaging, and any other method of

  communication considered private.

  Answer: C is incorrect. Sanitization is the process of removing sensitive information from a document or other medium so that it may be distributed to a broader audience. When dealing with classified information, sanitization attempts to

  reduce the document's classification level, possibly yielding an unclassified document. Originally, the term sanitization was applied to printed documents; it has since been extended to apply to computer media and the problem of data

  remanence as well.

  Answer: D is incorrect. Hacking is a process by which a person acquires illegal access to a computer or network through a security break or by implanting a virus on the computer or network.

  Answer: B is incorrect. Subnetting is a process through which an IP address network is divided into smaller networks. It is a hierarchical partitioning of the network address space of an organization into several subnets. Subnetting creates

  smaller broadcast domains. It helps in the better utilization of the bits in the Host ID.

• Question 57:

  Which of the following is a use of Microsoft Windows Malicious Software Removal Tool?

  A. To gain unauthorized remote access to a computer and launch additional attacks.
  B. To distribute itself automatically from one computer to another via network connections.
  C. To remove the malware.
  D. To perform repetitive or time-consuming task on a network.
  C. To remove the malware.

  ---

  Microsoft Windows Malicious Software Removal Tool is used to remove the malware.

  Answer: D is incorrect. A bot is defined as a program that is used to perform repetitive or time- consuming task on a network. Answer: A is incorrect. Rootkit is used to gain unauthorized remote access to a computer and launch additional

  attacks.

  Answer: B is incorrect. A worm can automatically distribute itself from one computer to another via network connections.

• Question 58:

  Which of the following applications captures network packets as they traverse a network and displays them to the attacker?

  A. Keylogger
  B. Sniffer
  C. Key fob
  D. Protocol analyzer
  B. Sniffer

  ---

  A sniffer is a software tool that is used to capture any network traffic. Since a sniffer changes the NIC of the LAN card into promiscuous mode, the NIC begins to record incoming and outgoing data traffic across the network. A sniffer attack is a

  passive attack because the attacker does not directly connect with the target host. This attack is most often used to grab logins and passwords from network traffic. Tools such as Ethereal, Snort, Windump, EtherPeek, Dsniff are some good

  examples of sniffers. These tools provide many facilities to users such as graphical user interface, traffic statistics graph, multiple sessions tracking, etc. Answer: D is incorrect. A protocol analyzer for particular types of networks is a computer

  software or computer hardware that can intercept and log traffic passing over a digital network or part of a network. As data streams flow across the network, the protocol analyzer captures each packet and, if needed, decodes and analyzes

  its content according to the appropriate RFC or other specifications.

  Answer: A is incorrect. A keylogger is a software tool that traces all or specific activities of a user on a computer. Once a keylogger is installed on a victim's computer, it can be used for recording all keystrokes on the victim's computer in a

  predefined log file. An attacker can configure a log file in such a manner that it can be sent automatically to a predefined e-mail address. Some of the main features of a keylogger are as follows:

  It can record all keystrokes.

  It can capture all screenshots.

  It can record all instant messenger conversations. It can be remotely installed.

  It can be delivered via FTP or e-mail.

  Answer: C is incorrect. Key fobs are security devices used by telecommuters to provide one part of a three way match for a user to log on to a secured network.

  

  These are display-only devices that algorithmically generate security codes as part of a challenge/response authentication system. This code usually changes very quickly and is used with the PIN for authentication.

• Question 59:

  This question requires that you evaluate the underlined text to determine if it is correct. The first line of defense against attacks from the Internet is a software firewall.

  Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed'' if the underlined text makes the statement correct.

  A. hardware firewall
  B. virus software
  C. radius server
  D. No change is needed
  A. hardware firewall

• Question 60:

  A network sniffer is software or hardware that:

  A. Records user activity and transmits it to the server
  B. Captures and analyzes network communication
  C. Protects workstations from intrusions
  D. Catalogs network data to create a secure index
  B. Captures and analyzes network communication

  ---

  A network sniffer is a computer tool that captures network data in the form of low-level packets. Network sniffers can be used for technical troubleshooting and analyzing the communication.