Microsoft 98-367 Online Practice Questions and Exam Preparation

Microsoft 98-367 Online Questions & Answers

• Question 61:

  Which type of firewall allows for inspection of all characteristics of a packet?

  A. NAT
  B. Stateful
  C. Stateless
  D. Windows Defender
  B. Stateful

  ---

  Reference: http://en.wikipedia.org/wiki/Stateful_firewall

• Question 62:

  Which of the following are the major components of the IPsec protocol? Each correct answer represents a complete solution. Choose all that apply.

  A. Encapsulating Security Payload (ESP)
  B. Authentication Header (AH)
  C. Internet Encryption Key (IEK)
  D. Internet Key Exchange (IKE)
  A. Encapsulating Security Payload (ESP)
  B. Authentication Header (AH)
  D. Internet Key Exchange (IKE)

  ---

  Answer: B, A, and D

  The IPsec protocol has three major components:

  1.Authentication Header (AH)

  2.Encapsulating Security Payload (ESP)

  3.Internet Key Exchange (IKE)

  Answer: C is incorrect. There is no such component of the IPSec protocol as Internet Encryption Key.

• Question 63:

  You need to give a standard user permission to run a program as an administrator.

  How should you set up the program shortcut to accomplish this?

  A. in a different Compatibility Mode
  B. by utilizing RunAs
  C. in a separate memory space
  D. by using a smart card
  B. by utilizing RunAs

• Question 64:

  What displays a user's level of access to a particular file or folder on the server?

  A. The Resultant Set of Policy
  B. the object's Advanced Attributes
  C. the object's Effective Permissions
  D. the client computer's registry
  C. the object's Effective Permissions

  ---

  References: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc756795 (v=ws.10)

• Question 65:

  Which of the following security methods can be used to detect the DoS attack in order to enhance the security of the network?

  A. Protocol analyzer
  B. WIPS
  C. WLAN controller
  D. Spectrum analyzer
  B. WIPS

  ---

  WIPS is used to detect the DOS attack in order to enhance the security of the network. Wireless intrusion prevention system (WIPS) is a network device that monitors the radio spectrum for the presence ofunauthorized access points

  (intrusion detection), and can automaticallytake countermeasures (intrusion prevention). The primary purpose of a WIPS is to prevent unauthorized network access to local area networks and other information assets by wireless devices.

  Answer:

  C is incorrect. A wireless LAN controller is a device that is used in combination with Lightweight Access Point Protocol (LWAPP) to manage light weight access points in large quantities by the network administrator or NOC. The wireless LAN

  controller is a part of the Data Plane within the Cisco Wireless Model. The WLAN controller automatically handles the configuration of anywhere from 6 to 300 wireless access-points, depending on the model. Answer: D is incorrect. A

  spectrum analyzer, or spectral analyzer, is a device that is used to examine the spectral composition of some electrical, acoustic, or optical waveform. It may also measure the power spectrum. The analog and digital spectrum analyzers are

  as follows:

  1.An analog spectrum analyzer uses either a variable band-pass filter whose mid- frequency is automatically tuned (shifted, swept) through the range of frequencies of which the spectrum is to be measured.

  2.A digital spectrum analyzer computes the discrete Fourier transform (DFT), a mathematical process that transforms a waveform into the components of its frequency spectrum.

  Answer: A is incorrect. A protocol analyzer is a network diagnostic utility for viewing the current contents of a packet traveling on the network. Protocol analyzers are mainly used for performance measurement and troubleshooting. These

  devices connect to the network to calculate key performance indicators (KPI) to monitor the network and speed up troubleshooting activities.

• Question 66:

  Which of the following operating systems have Windows Security Health Agent (SHA) on computers and report their status to the Security Health Validator (SHV)? Each correct answer represents a complete solution. Choose three.

  A. Windows 2000 Professional
  B. Windows Vista Business
  C. Windows XP Service Pack 3
  D. Windows 7 Professional
  B. Windows Vista Business
  C. Windows XP Service Pack 3
  D. Windows 7 Professional

  ---

  Answer: B, D, and C and correct.

  The following operating systems have Security Health Agent (SHA) on computers and report their status to the Security Health Validator (SHV):

  Windows Vista Business Windows 7 Professional Windows XP Service Pack 3

• Question 67:

  A malicious user who intercepts and modifies communications is known as a:

  A. red hat hacker
  B. white hat hacker
  C. network sniffer
  D. man-in-the-middle
  D. man-in-the-middle

• Question 68:

  You have configured a virtualized Internet browser on your Windows XP professional computer. Using the virtualized Internet browser, you can protect your operating system from which of the following?

  A. Brute force attack
  B. Distributed denial of service (DDOS) attack
  C. Mail bombing
  D. Malware installation from unknown Web sites
  D. Malware installation from unknown Web sites

  ---

  Virtualized Internet browser can protect your operating system from Malware installation from unknown Web sites. It protects the operating system and other applications from poorly written or buggy code by isolating applications from the operating system.

• Question 69:

  Mark works as the Network Administrator of a Windows 2000 based network. In order to reduce the administrative burden and to optimize the network performance, he implements the DHCP and the DNS servers on the network. What will he do integrate the working between the DHCP and the DNS servers? Each correct answer represents a part of the solution. Choose two.

  A. Configure the clients to use the DHCP server.
  B. Enable DNS updates on the DHCP server.
  C. Enable dynamic update on the DNS server.
  D. Use the TCP/IP protocol on the network.
  B. Enable DNS updates on the DHCP server.
  C. Enable dynamic update on the DNS server.

  ---

  Answer: B and C To ensure proper DHCP-DNS integration, Mark must enable dynamic DNS support on the DNS server as well as on the DHCP server. In the Windows 2000 Server, the DHCP service provides support to register and update information for legacy DHCP clients in DNS zones. Legacy clients typically include other Microsoft TCP/IP client computers that were released prior to Windows 2000 like Windows 9x, Windows NT. The DNS-DHCP integration, provided in the Windows 2000 Server, enables a DHCP client that is unable to dynamically update DNS resource records directly to have this information updated in the DNS forward, and reverse lookup zones by the DHCP server. Note: Dynamic integration with the DHCP service is available only with Windows 2000 Server. DNS-DHCP integration is not supported by DHCP servers running under Windows NT Server 4.0 and earlier versions.

• Question 70:

  You need to install a domain controller in a branch office. You also need to secure the information on the domain controller. You will be unable to physically secure the server. Which should you implement?

  A. Read-Only Domain Controller
  B. Point-to-Point Tunneling Protocol (PPTP)
  C. Layer 2 Tunneling Protocol (L2TP)
  D. Server Core Domain Controller
  A. Read-Only Domain Controller

  ---

  A read-only domain controller (RODC) is a new type of domain controller in the Windows Server?2008 operating system. With an RODC, organizations can easily deploy a domain controller in locations where physical security cannot be guaranteed. An RODC hosts read-only partitions of the Active Directory?Domain Services (AD DS) database.

  References: http://technet.microsoft.com/en-us/library/cc732801(v=ws.10).aspx