Microsoft 98-367

1

Which attack listens to network traffic of a computer resource?

1

The default password length for a Windows Server domain controller is:

1

What does NAT do?

1

Role separation improves server security by:

1

The Graphic Design Institute hires you to help them set up a server for their 20-person
team.
As a general practice of hardening the server, you start by performing which two tasks?
(Choose two.)

1

A network sniffer is software or hardware that:

1

Alice sends her password to the game server in plaintext. Chuck is able to observe her
password as shown in the following image:

The scenario demonstrated is a(n) ( main in the middle, eavesdropping, denial of service ) attack.

1

Alice sends her password to the game server in plaintext. Chuck is able to observe her
password as shown in the following image:

Alice should ( never send a plaintext password, only send pw N plaintxt 2known companies, only send pw N plaintxt over the local n ) to avoid this type of attack.

1

Your password is 1Vu*cI!8sT.
Which attack method is your password vulnerable to?

1

A group of users has access to Folder A and all of its contents. You need to prevent some
of the users from accessing a subfolder inside Folder A.
What should you do first?

1

Many Internet sites that you visit require a user name and password.
How should you secure these passwords?

1

Bridging is a process of sending packets from source to destination on OSI layer 3.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

1

You need to install a domain controller in a branch office. You also need to secure the
information on the domain controller. You will be unable to physically secure the server.
Which should you implement?

1

What are two attributes that an email message may contain that should cause a user to
question whether the message is a phishing attempt? (Choose two.)

1

The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting
it with the WPS PIN.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

1

To implement WPA2 Enterprise, you would need a/an:

1

You are volunteering at an organization that gets a brand new web server. To make the
server more secure, you should add a second administrator account.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

1

Which two characteristics should you recommend for a user's domain password? (Choose
two.)

1

What is a service set identifier (SSID)?

1

You can view audit logs in the Event Viewer
( Yes, No )

Audit logs have a set size limit and cannot be adjusted.
( Yes, No )

You can configure an email event notification for an audited activity.
( Yes, No )

1

Which is the minimum requirement to create BitLocker-To-Go media on a client computer?

1

The Active Directory controls, enforces, and assigns security policies and access rights for
all users.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

1

Which two security settings can be controlled by using group policy? (Choose two.)

1

Coho Winery wants to increase their web presence and hires you to set up a new web
server. Coho already has servers for their business and would like to avoid purchasing a
new one.
Which server is best to use as a web server, considering the security and performance
concerns?

1

Cookies impact security by enabling: (Choose two.)

1

To protect systems from buffer overflow errors, you can use:

1

Account lockout policies are used to prevent which type of security attack?

1

An employee where you work is unable to access the company message board in Internet
Explorer.
You review her Internet Options dialog box, as shown in the following image:

Use the drop-down menus to select the answer choice that completes each statement.
Each correct selection is worth one point.

This message board, http://mkteam/, would be affected by settings under the ( Internet, Local Intranet, Restricted Sites ) security zone.

The employee can see the site, but ActiveX controls will not load. You have to ( change the security level on Local Intra, change the security level on Internet., uncheck Enable Protected Mode. )

1

A user who receives a large number of emails selling prescription medicine is probably
receiving pharming mail.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

To protect users from untrusted browser pop-ups, you may set a default browser configuration that blocks all pop-ups and automated downloads. ( Yes, No )

Online pop-ups and dialog boxes can display a realistic operating system or application error messages. ( Yes, No )

Protecting users from untrusted pop-up applications is mostly a function of awareness. ( Yes, No )

1

You want to make your computer resistant to online hackers and malicious software.
What should you do?

1

The certificate of a secure public Web server on the Internet should be:

1

The primary method of authentication in an SSL connection is passwords.
To answer, choose the option "No change is needed" if the underlined text is correct. If the
underlined text is not correct, choose the correct answer.

1

Because senior executives have rights to access sensitive data, hey should use administrator accounts( Yes, No )

The User Account Control (UAC) has one overall goal: to grant users the lowest level permissions required to complete their tasks. ( Yes, No )

System administrators should use a standard user account when performing routine functions like reading emails and browsing the Internet. ( Yes, No )

1

What is a common method for password collection?

1

You are at school and logged in to a Windows 7 computer using a standard user account.
You need to change some of the properties of a desktop icon for an assignment. Your
instructor provides you with an administrator username and password and asks you to do
two tasks.
When you open the Need Admin Access Properties window, you see the following image:

To allow this log file to be opened as an administrator, you should ( click Advanced and choose "run as admini, click Run and and chose "run as administ, click the Security tab and give admin ri )
A. click Advanced and choose "run as administrator".
B. click Run and choose "run as administer."
C. click the Security tab and give admin rights to your standard account.

To allow this log file to be opened in a maximized window, you should ( click Run and choose "maximized window.", click the General tab and click "change, click Change Icon to choose "run as a ma )
A. click Run and choose "maximized window."
B. click the General tab and click "change to open the document as a maximized window."
C. click Change Icon to choose "run as a maximized window

1

You are an intern and are working remotely.
You need a solution that meets the following requirements:
✑ Allows you to access data on the company network securely
✑ Gives you the same privileges and access as if you were in the office
What are two connection methods you could use? (Choose two.

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

There are several built-in basic audit policies and advanced audit policies in Windows. ( Yes, No )
Advanced audit policies applied by a Group Policy are compatible with a basic audit policy. ( Yes, No )
A system access control list (SACL) enables administrators to log attempts to access a secured object. ( Yes, No )

1

A digitally signed e-mail message:

1

To keep third-party content providers from tracking your movements on the web, enable
InPrivate Browsing.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed'' if the underlined text makes the statement correct.

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

IPsec requires network applications to be IPsec aware. ( Yes, No )

IPsec encrypts data. ( Yes, No )

IPsec adds overhead for all network communications for which it is used. ( Yes, No )

1

Keeping a server updated:

1

Humongous Insurance needs to set up a domain controller in a branch office.
Unfortunately, the server cannot be sufficiently secured from access by employees in that
office, so the company is installing a Primary Domain Controller.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

1

Phishing is an attempt to:

1

You are preparing an audit policy for the workstations at Contoso, Ltd. Currently, no
advanced auditing is enabled. The workstations are not members of the domain.
The settings of your Advanced Audit Policy Configuration are shown in the following image:

To enable auditing of all local login events, you need to turn on the ( Logon/Logoff, Account Logon, System ) Advanced Audit Policy.

You need to know when someone accesses files in the c: \tempt directory. Auditing is turned on for this directory. You need to enable the ( Object Access, Privilege Use, System ) Advanced Audit Policy to log these events.

1

What is an example of non-propagating malicious code?

1

You create a web server for your school. When users visit your site, they get a certificate
error that says your site is not trusted.
What should you do to fix this problem?

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

UAC reduces your permissions to that of a standard user unless higher permissions are necessary. ( Yes, No )

UAC notifies you when additional permissions are required and asks if you wish to continue. ( Yes, No )

UAC cannot be disabled. ( Yes, No )

1

Windows Server Update Services (WSUS) is a tool that:

1

The purpose of Microsoft Baseline Security Analyzer is to:

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

If your computer is on a domain, your network administrator can reset your password. ( Yes, No )

An administrator account can reset a password for a standard user account. ( Yes, No )

There is a risk of losing access to encrypted files if a password is reset. ( Yes, No )

1

In Internet Explorer 8, the InPrivate Browsing feature prevents:

1

Which enables you to change the permissions on a folder?

1

To prevent users from copying data to removable media, you should:

1

Which technology enables you to filter communications between a program and the
Internet?

1

This question requires that you evaluate the underlined text to determine if it is correct.
The first line of defense against attacks from the Internet is a software firewall.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed'' if the underlined text makes the statement correct.

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

BitLocker to Go Reader allows you to encrypt drives. ( Yes, No )

BitLocker to Go Reader requires drives that are encrypted using a password. ( Yes, No )

BitLocker to Go works on Windows Vista and Windows XP. ( Yes, No )

1

Which type of firewall allows for inspection of all characteristics of a packet?

1

You suspect a user's computer is infected by a virus.
What should you do first?

1

You need to prevent unauthorized users from reading a specific file on a portable computer
if the portable computer is stolen.
What should you implement?

1

Basic security questions used to reset a password are susceptible to:

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

DNSSEC prevents spoofing of query responses. ( Yes, No )

Client can verify that DNS server that they are communicating with is legitimate. ( Yes, No )

DNSSEC prevents man-in-the-middle attacks for DNS queries. ( Yes, No )

1

Which is a special folder permission?

1

Network Access Protection (NAP) enables administrators to control access to network
resources based on a computer's:

1

A mail system administrator scans for viruses in incoming emails to increase the speed of
mail processing.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

1

Before you deploy Network Access Protection (NAP), you must install:

1

The company that you work for wants to set up a secure network, but they do not have any
servers.
Which three security methods require the use of a server? (Choose three.)

1

What are three major attack vectors that a social engineering hacker may use? (Choose
three.)

1

Password history policies are used to prevent:

1

E-mail bombing attacks a specific entity by:

1

Which two are included in an enterprise antivirus program? (Choose two.)

1

The Windows Firewall protects computers from unauthorized network connections.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed'' if the underlined text makes the statement correct.

1

When conducting a security audit the first step is to:

1

Setting a minimum password age restricts when users can:

1

The purpose of a digital certificate is to verify that a:

1

You create a new file in a folder that has inheritance enabled.
By default, the new file:

1

Dumpster diving refers to a physical threat that a hacker might use to look for information
about a computer network.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

1

You need to grant a set of users write access to a file on a network share. You should add
the users to:

1

Your company requires that users type a series of characters to access the wireless
network.
The series of characters must meet the following requirements:
✑ Contains more than 15 characters
✑ Contains at least one letter
✑ Contains at least one number
✑ Contains at least one symbol
Which security technology meets these requirements?

1

The manager of a coffee shop hires you to securely set up WiFi in the shop.
To keep computer users from seeing each other, what should you use with an access
point?

1

You have two servers that run Windows Server. All drives on both servers are formatted by
using NTFS.
You move a file from one server to the other server. The file's permissions in the new
location will:

1

Which three elements does HTTPS encrypt? (Choose three.)

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

Honey pots are primarily used to attract potential attackers or hackers. ( Yes, No )

By setting up a honey pot, an administrator can get insightful information by the attacker, such as the IP address. ( Yes, No )

A honey pot is an appliance or piece of software that allows or denies network access based on a preconfigured set of rules. ( Yes, No )

1

Shredding documents helps prevent:

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

By using NAP, administrators can place non-compliant computers onto restricted networks. ( Yes, No )

All computers that are not in compliance with NAP policies require manual intervention to be brought into compliance. ( Yes, No )

NAP can enforce that client computers are running a firewall. ( Yes, No )

1

What are three examples of two-factor authentication? (Choose three.)

1

Passwords that contain recognizable words are vulnerable to a:

1

A brute force attack:

1

The purpose of User Account Control (UAC) is to:

1

You are setting up Remote Desktop on your computer. Your computer is a member of a
domain.
Your firewall configuration is shown in the following image:

You need to allow Remote Desktop to be able to get through your firewall for users on your
company's network.
Which settings should you enable?

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

Tools like Microsoft Security Compliance Manager and Microsoft Baseline Security Analyzer can assist with server hardening. ( Yes, No )

Administrator passwords may contain ASCII characters generated by a combination of the ALT key and three digits on the numeric keypad. ( Yes, No )

The removal of unused registry entries and executables increases the surface vulnerability of the server. ( Yes, No )

1

Windows Firewall is a built-in. host-based, stateless firewall.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

FAT32 has built-in security features that control user access. ( Yes, No )

NFTS has built-in security features that control file access. ( Yes, No )

All users on the same FAT32 file system have access rights to all files. ( Yes, No )

1

An attorney hires you to increase the wireless network security for the law firm's office. The
office has a very basic network, with just a modem and a router.
Which of these security modes offers the highest security?

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

Smart cards can be used in biometrics-based systems. ( Yes, No )

Smart cards can be read from distances of several inches to many yards. ( Yes, No )

Smart cards provide a means of securely storing data on the card. ( Yes, No )

1

What is the primary advantage of using Active Directory Integrated Zones?

1

You sign up for an online bank account. Every 6 months, the bank requires you to change
your password. You have changed your password 5 times in the past. Instead of coming up
with a new password, you decide to use one of your past passwords, but the bank's
password history prevents you on doing so.
Select the correct answer if the underlined text does not make the statement correct Select
"No change is needed" if the underlined text makes the statement correct.

1

You have a Windows 7 desktop computer, and you create a Standard User account for
your roommate so that he can use the desktop from time to time. Your roommate has
forgotten his password.
Which two actions can you take to reset the password? (Choose two.)

1

Which password attack uses all possible alpha numeric combinations?

1

You need to limit the programs that can run on client computers to a specific list.
Which technology should you implement?

1

Creating MD5 hash for files is an example of ensuring what?

1

Physically securing servers prevents:

1

Which of the following describes a VLAN?

1

E-mail spoofing:

1

The client computers on your network are stable and do not need any new features.
Which is a benefit of applying operating system updates to these clients?

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

Biometrics are used to authenticate users. ( Yes, No )

Biometric data is usually encrypted when it is gathered.( Yes, No )

An example of a biometric device is a fingerprint scanner. ( Yes, No )

1

What does implementing Windows Server Update Services (WSUS) allow a company to
manage?

1

The primary purpose of Network Access Protection (NAP) is to prevent:

1

You are trying to establish communications between a client computer and a server. The
server is not responding.
You confirm that both the client and the server have network connectivity.
Which should you check next?

1

You are an intern at Litware, Inc. Your manager asks you to make password guess
attempts harder by limiting login attempts on company computers.
What should you do?

1

You would implement a wireless intrusion prevention system to:

1

What is the standard or basic collection of NTFS permissions?

1

You are an intern at Wide World Importers and help manage 1000 workstations. All the
workstations are members of an Active Domain.
You need to push out an internal certificate to Internet Explorer on all workstations.
What is the quickest method to do this?

1

Your supervisor asks you to review file permission settings on the application.bat file.
You need to report which file system the file is on and the type of permission the file has.
You review the application Properties dialog box shown in the following image:

Use the drop-down menus to select the answer choice that completes each statement.
Each correct selection is worth one point.

The "cygwin.bat" file in the image is currently on the ( FAT16, FAT32, NTFS ) file system.

( Basic, Advanced, Full Control ) permissions are currently being displayed for the "cygwin.bat" file.

1

How does the sender policy framework (SPF) aim to reduce spoofed email?

1

You are trying to connect to an FTP server on the Internet from a computer in a school lab.
You cannot get a connection. You try on another computer with the same results. The
computers in the lab are able to browse the Internet.
You are able to connect to this FTP server from home.
What could be blocking the connection to the server?

1

You are an intern for a company where your manager wants to be sure you understand the
social engineering threats that may occur. Your manager emphasizes the principles of the
Microsoft Defense-in-Depth Security Model shown in the following image:

Use the drop-down menus to select the answer choice that completes each statement.
Each correct selection is worth one point.

The ( Policies, Procedures, and Awareness, Data Defenses, Physical Security ) defense targets staff within an organization, explaining what to do, when, why, and by whom.

The overarching defense of the Microsoft Defense-in-Depth Security Model is ( Policies, Procedures, and Awareness, Network Defenses, Data Defenses )

1

Humongous Insurance is an online healthcare insurance company. During an annual
security audit a security firm tests the strength of the company's password policy and
suggests that Humongous Insurance implement password history policy.
What is the likely reason that the security firm suggests this?

1

Which enables access to all of the logged-in user's capabilities on a computer?

1

Where should you lock up the backup tapes for your servers?

1

Which provides the highest level of security in a firewall?

1

Alice and Bob are exchanging messages with each other. Chuck modifies the messages
sent between Alice and Bob as shown in the following image:

Use the drop-down menus to select the answer choice that completes each statement.
Each correct selection is worth one point.

The scenario demonstrated is a ( man in the middle, phishing, denial of service ) attack.

Alice and Bob could add a ( checksum, digital signature, timestamp ) to avoid this type of attack.

1

For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Each correct selection is worth one point.

An intruder can spoof MAC addresses to get around MAC address filtering. ( Yes, No )

Intruders can find a wireless network if the Service Set Identifier (SSID) is hidden. ( Yes, No )

WEP security is strong as long as it has a 128-bit key. ( Yes, No )

1

You are preparing a local audit policy for your workstation. No auditing is enabled.
The settings of your policy are shown in the following image:

Use the drop-down menus to select the answer choice that completes each statement.
Each correct selection is worth one point.

In order to log each time the computer validates account credentials, the ( Audit account logon events, Audit logon events, Audit object access ) policy needs to be enabled.

You need to log each time someone reboots the workstation. The ( Audit system events, Audit process tracking, Audit logon events ) policy will log a reboot of the computer.

10th grade MTA 98-367 Quiz am Microsoft 98-367, erstellt von JOSHUA BEKIARIS am 30/04/2018.

Microsoft 98-367

Which attack listens to network traffic of a computer resource?

The default password length for a Windows Server domain controller is:

What does NAT do?

Role separation improves server security by:

The Graphic Design Institute hires you to help them set up a server for their 20-person team. As a general practice of hardening the server, you start by performing which two tasks? (Choose two.)

A network sniffer is software or hardware that:

Alice sends her password to the game server in plaintext. Chuck is able to observe her password as shown in the following image: The scenario demonstrated is a(n) main in the middle eavesdropping denial of service( main in the middle, eavesdropping, denial of service ) attack.

Your password is 1Vu*cI!8sT. Which attack method is your password vulnerable to?

A group of users has access to Folder A and all of its contents. You need to prevent some of the users from accessing a subfolder inside Folder A. What should you do first?

Many Internet sites that you visit require a user name and password. How should you secure these passwords?

Bridging is a process of sending packets from source to destination on OSI layer 3. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

You need to install a domain controller in a branch office. You also need to secure the information on the domain controller. You will be unable to physically secure the server. Which should you implement?

What are two attributes that an email message may contain that should cause a user to question whether the message is a phishing attempt? (Choose two.)

The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting it with the WPS PIN. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

To implement WPA2 Enterprise, you would need a/an:

Which two characteristics should you recommend for a user's domain password? (Choose two.)

What is a service set identifier (SSID)?

You can view audit logs in the Event Viewer Yes No( Yes, No ) Audit logs have a set size limit and cannot be adjusted. Yes No( Yes, No ) You can configure an email event notification for an audited activity. Yes No( Yes, No )

The Graphic Design Institute hires you to help them set up a server for their 20-person
team.
As a general practice of hardening the server, you start by performing which two tasks?
(Choose two.)

Alice sends her password to the game server in plaintext. Chuck is able to observe her
password as shown in the following image:

The scenario demonstrated is a(n) ( main in the middle, eavesdropping, denial of service ) attack.

Your password is 1Vu*cI!8sT.
Which attack method is your password vulnerable to?

A group of users has access to Folder A and all of its contents. You need to prevent some
of the users from accessing a subfolder inside Folder A.
What should you do first?

Many Internet sites that you visit require a user name and password.
How should you secure these passwords?

Bridging is a process of sending packets from source to destination on OSI layer 3.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

You need to install a domain controller in a branch office. You also need to secure the
information on the domain controller. You will be unable to physically secure the server.
Which should you implement?

What are two attributes that an email message may contain that should cause a user to
question whether the message is a phishing attempt? (Choose two.)

The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting
it with the WPS PIN.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

Which two characteristics should you recommend for a user's domain password? (Choose
two.)

You can view audit logs in the Event Viewer
( Yes, No )

Audit logs have a set size limit and cannot be adjusted.
( Yes, No )

You can configure an email event notification for an audited activity.
( Yes, No )

The Active Directory controls, enforces, and assigns security policies and access rights for
all users.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

Coho Winery wants to increase their web presence and hires you to set up a new web
server. Coho already has servers for their business and would like to avoid purchasing a
new one.
Which server is best to use as a web server, considering the security and performance
concerns?

A user who receives a large number of emails selling prescription medicine is probably
receiving pharming mail.
Select the correct answer if the underlined text does not make the statement correct. Select
"No change is needed" if the underlined text makes the statement correct.

You want to make your computer resistant to online hackers and malicious software.
What should you do?

The primary method of authentication in an SSL connection is passwords.
To answer, choose the option "No change is needed" if the underlined text is correct. If the
underlined text is not correct, choose the correct answer.

You are an intern and are working remotely.
You need a solution that meets the following requirements:
✑ Allows you to access data on the company network securely
✑ Gives you the same privileges and access as if you were in the office
What are two connection methods you could use? (Choose two.