Copy and Edit

Microsoft 98-367

Description

10th grade MTA 98-367 Quiz on Microsoft 98-367, created by JOSHUA BEKIARIS on 30/04/2018.
JOSHUA BEKIARIS
Quiz by JOSHUA BEKIARIS, updated more than 1 year ago
JOSHUA BEKIARIS
Created by JOSHUA BEKIARIS over 6 years ago
853
0
0

Resource summary

Question 1

Question
Which attack listens to network traffic of a computer resource?
Answer
  • Resource gathering
  • Denial of service
  • ARP poisoning
  • Eavesdropping
  • Logic bomb

Question 2

Question
The default password length for a Windows Server domain controller is:
Answer
  • 0
  • 5
  • 7
  • 14

Question 3

Question
What does NAT do?
Answer
  • It encrypts and authenticates IP packets.
  • It provides caching and reduces network traffic.
  • It translates public IP addresses to private addresses and vice versa.
  • It analyzes incoming and outgoing traffic packets.

Question 4

Question
Role separation improves server security by:
Answer
  • Enforcing principle of least privilege.
  • Installing applications on separate hard disks.
  • Physically separating high security servers from other servers.
  • Placing servers on separate VLANs.

Question 5

Question
The Graphic Design Institute hires you to help them set up a server for their 20-person team. As a general practice of hardening the server, you start by performing which two tasks? (Choose two.)
Answer
  • Disable the guest account.
  • Rename the admin account.
  • Remove the account lockout policy.
  • Format partitions with FAT32.

Question 6

Question
A network sniffer is software or hardware that:
Answer
  • Records user activity and transmits it to the server
  • Captures and analyzes network communication
  • Protects workstations from intrusions
  • Catalogs network data to create a secure index

Question 7

Question
Alice sends her password to the game server in plaintext. Chuck is able to observe her password as shown in the following image: The scenario demonstrated is a(n) [blank_start][answer choice][blank_end] attack.
Image:
2 (binary/octet-stream)
Answer
  • main in the middle
  • eavesdropping
  • denial of service

Question 8

Question
Alice sends her password to the game server in plaintext. Chuck is able to observe her password as shown in the following image: Alice should [blank_start][answer choice][blank_end] to avoid this type of attack.
Image:
2 (binary/octet-stream)
Answer
  • never send a plaintext password
  • only send pw N plaintxt 2known companies
  • only send pw N plaintxt over the local n

Question 9

Question
Your password is 1Vu*cI!8sT. Which attack method is your password vulnerable to?
Answer
  • Rainbow table
  • Brute force
  • Spidering
  • Dictionary

Question 10

Question
A group of users has access to Folder A and all of its contents. You need to prevent some of the users from accessing a subfolder inside Folder A. What should you do first?
Answer
  • Disable folder sharing
  • Hide the folder
  • Change the owner
  • Block inheritance

Question 11

Question
Many Internet sites that you visit require a user name and password. How should you secure these passwords?
Answer
  • Save them to a text file
  • Enable session caching
  • Configure the browser to save passwords
  • Save them to an encrypted file
  • Reuse the same password

Question 12

Question
Bridging is a process of sending packets from source to destination on OSI layer 3. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • Routing
  • Switching
  • Repeating
  • No change is needed.

Question 13

Question
You need to install a domain controller in a branch office. You also need to secure the information on the domain controller. You will be unable to physically secure the server. Which should you implement?
Answer
  • Read-Only Domain Controller
  • Point-to-Point Tunneling Protocol (PPTP)
  • Layer 2 Tunneling Protocol (L2TP)
  • Server Core Domain Controller

Question 14

Question
What are two attributes that an email message may contain that should cause a user to question whether the message is a phishing attempt? (Choose two.)
Answer
  • An image contained in the message
  • Spelling and grammar errors
  • Threats of losing service
  • Use of bold and italics

Question 15

Question
The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting it with the WPS PIN. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • Service Set Identifier (SSID)
  • Admin password
  • WEP key
  • No change is needed

Question 16

Question
To implement WPA2 Enterprise, you would need a/an:
Answer
  • RADIUS server
  • SSL server
  • WEP server
  • VPN server

Question 17

Question
You are volunteering at an organization that gets a brand new web server. To make the server more secure, you should add a second administrator account. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • Disable unused services
  • Enable LM authentication
  • Enable NTLM authentication
  • No change is needed.

Question 18

Question
Which two characteristics should you recommend for a user's domain password? (Choose two.)
Answer
  • Hard to guess
  • Includes Unicode characters
  • Easy to remember
  • Easy to increment

Question 19

Question
What is a service set identifier (SSID)?
Answer
  • A wireless encryption standard
  • The wireless LAN transmission type
  • The broadcast name of an access point
  • A wireless security protocol

Question 20

Question
You can view audit logs in the Event Viewer [blank_start]yes[blank_end] Audit logs have a set size limit and cannot be adjusted. [blank_start]no[blank_end] You can configure an email event notification for an audited activity. [blank_start]yes[blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 21

Question
Which is the minimum requirement to create BitLocker-To-Go media on a client computer?
Answer
  • Windows XP Professional Service Pack 3
  • Windows Vista Enterprise Edition
  • Windows 7 Enterprise Edition
  • Windows 2000 Professional Service Pack 4

Question 22

Question
The Active Directory controls, enforces, and assigns security policies and access rights for all users. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • NTFS permissions
  • User Account Control
  • Registry
  • No change is needed

Question 23

Question
Which two security settings can be controlled by using group policy? (Choose two.)
Answer
  • Password complexity
  • Access to the Run... command
  • Automatic file locking
  • Encrypted access from a smart phone

Question 24

Question
Coho Winery wants to increase their web presence and hires you to set up a new web server. Coho already has servers for their business and would like to avoid purchasing a new one. Which server is best to use as a web server, considering the security and performance concerns?
Answer
  • SQL Server
  • File Server
  • Domain Controller
  • Application Server

Question 25

Question
Cookies impact security by enabling: (Choose two.)
Answer
  • Storage of Web site passwords.
  • Higher security Web site protections.
  • Secure Sockets Layer (SSL).
  • Web sites to track browsing habits.

Question 26

Question
To protect systems from buffer overflow errors, you can use:
Answer
  • Antivirus software
  • Data Execution Prevention
  • A proxy server
  • An Intruder Prevention System

Question 27

Question
Account lockout policies are used to prevent which type of security attack?
Answer
  • Brute force attacks
  • Users sharing passwords
  • Social engineering
  • Passwords being reused immediately

Question 28

Question
An employee where you work is unable to access the company message board in Internet Explorer. You review her Internet Options dialog box, as shown in the following image: Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point. This message board, http://mkteam/, would be affected by settings under the [blank_start][answer choice][blank_end] security zone. The employee can see the site, but ActiveX controls will not load. You have to [blank_start][answer choice][blank_end]
Image:
3 (binary/octet-stream)
Answer
  • Internet
  • Local Intranet
  • Restricted Sites
  • change the security level on Local Intra
  • change the security level on Internet.
  • uncheck Enable Protected Mode.

Question 29

Question
A user who receives a large number of emails selling prescription medicine is probably receiving pharming mail. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • Malware
  • Spoofed mail
  • Spam
  • No change is needed.

Question 30

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. To protect users from untrusted browser pop-ups, you may set a default browser configuration that blocks all pop-ups and automated downloads. [blank_start][answer choice][blank_end] Online pop-ups and dialog boxes can display a realistic operating system or application error messages. [blank_start][answer choice][blank_end] Protecting users from untrusted pop-up applications is mostly a function of awareness. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 31

Question
You want to make your computer resistant to online hackers and malicious software. What should you do?
Answer
  • Configure a forward proxy.
  • Install anti-virus software.
  • Enable spam filtering.
  • Turn on Windows Firewall.

Question 32

Question
The certificate of a secure public Web server on the Internet should be:
Answer
  • Issued by a public certificate authority (CA)
  • Signed by using a 4096-bit key
  • Signed by using a 1024-bit key
  • Issued by an enterprise certificate authority (CA)

Question 33

Question
The primary method of authentication in an SSL connection is passwords. To answer, choose the option "No change is needed" if the underlined text is correct. If the underlined text is not correct, choose the correct answer.
Answer
  • No change is needed
  • Certificates
  • IPsec
  • Biometrics

Question 34

Question
Because senior executives have rights to access sensitive data, hey should use administrator accounts[blank_start][Answer choice][blank_end] The User Account Control (UAC) has one overall goal: to grant users the lowest level permissions required to complete their tasks. [blank_start][Answer choice][blank_end] System administrators should use a standard user account when performing routine functions like reading emails and browsing the Internet. [blank_start][Answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 35

Question
What is a common method for password collection?
Answer
  • Email attachments
  • Back door intrusions
  • SQL Injection
  • Network sniffers

Question 36

Question
You are at school and logged in to a Windows 7 computer using a standard user account. You need to change some of the properties of a desktop icon for an assignment. Your instructor provides you with an administrator username and password and asks you to do two tasks. When you open the Need Admin Access Properties window, you see the following image: To allow this log file to be opened as an administrator, you should [blank_start][answer choice][blank_end] A. click Advanced and choose "run as administrator". B. click Run and choose "run as administer." C. click the Security tab and give admin rights to your standard account. To allow this log file to be opened in a maximized window, you should [blank_start][answer choice][blank_end] A. click Run and choose "maximized window." B. click the General tab and click "change to open the document as a maximized window." C. click Change Icon to choose "run as a maximized window
Image:
2 (binary/octet-stream)
Answer
  • click Advanced and choose "run as admini
  • click Run and and chose "run as administ
  • click the Security tab and give admin ri
  • click Run and choose "maximized window."
  • click the General tab and click "change
  • click Change Icon to choose "run as a ma

Question 37

Question
You are an intern and are working remotely. You need a solution that meets the following requirements: ✑ Allows you to access data on the company network securely ✑ Gives you the same privileges and access as if you were in the office What are two connection methods you could use? (Choose two.
Answer
  • Forward Proxy
  • Virtual Private Network (VPN)
  • Remote Access Service (RAS)
  • Roaming Profiles

Question 38

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. There are several built-in basic audit policies and advanced audit policies in Windows. [blank_start][answer choice][blank_end] Advanced audit policies applied by a Group Policy are compatible with a basic audit policy. [blank_start][answer choice][blank_end] A system access control list (SACL) enables administrators to log attempts to access a secured object. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 39

Question
A digitally signed e-mail message:
Answer
  • Validates the recipient
  • Validates the sender
  • Is encrypted
  • Is virus-free

Question 40

Question
To keep third-party content providers from tracking your movements on the web, enable InPrivate Browsing. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed'' if the underlined text makes the statement correct.
Answer
  • InPrivate Filtering
  • SmartScreen Filter
  • Compatibility Mode
  • No change is needed

Question 41

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. IPsec requires network applications to be IPsec aware. [blank_start][answer choice][blank_end] IPsec encrypts data. [blank_start][answer choice][blank_end] IPsec adds overhead for all network communications for which it is used. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 42

Question
Keeping a server updated:
Answer
  • Maximizes network efficiency
  • Fixes security holes
  • Speeds up folder access
  • Synchronizes the server

Question 43

Question
Humongous Insurance needs to set up a domain controller in a branch office. Unfortunately, the server cannot be sufficiently secured from access by employees in that office, so the company is installing a Primary Domain Controller. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • Read-Only Domain Controller
  • Backup Domain Controller
  • Active Directory Server
  • No change is needed.

Question 44

Question
Phishing is an attempt to:
Answer
  • Obtain information by posing as a trustworthy entity.
  • Limit access to e-mail systems by authorized users.
  • Steal data through the use of network intrusion.
  • Corrupt e-mail databases through the use of viruses.

Question 45

Question
You are preparing an audit policy for the workstations at Contoso, Ltd. Currently, no advanced auditing is enabled. The workstations are not members of the domain. The settings of your Advanced Audit Policy Configuration are shown in the following image: To enable auditing of all local login events, you need to turn on the [blank_start][answer choice][blank_end] Advanced Audit Policy. You need to know when someone accesses files in the c: \tempt directory. Auditing is turned on for this directory. You need to enable the [blank_start][answer choice][blank_end] Advanced Audit Policy to log these events.
Image:
4 (binary/octet-stream)
Answer
  • Logon/Logoff
  • Account Logon
  • System
  • Object Access
  • Privilege Use
  • System

Question 46

Question
What is an example of non-propagating malicious code?
Answer
  • A back door
  • A hoax
  • A Trojan horse
  • A worm

Question 47

Question
You create a web server for your school. When users visit your site, they get a certificate error that says your site is not trusted. What should you do to fix this problem?
Answer
  • Install a certificate from a trusted Certificate Authority (CA).
  • Use a digital signature.
  • Generate a certificate request.
  • Enable Public Keys on your website.

Question 48

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. UAC reduces your permissions to that of a standard user unless higher permissions are necessary. [blank_start][answer choice][blank_end] UAC notifies you when additional permissions are required and asks if you wish to continue. [blank_start][answer choice][blank_end] UAC cannot be disabled. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 49

Question
Windows Server Update Services (WSUS) is a tool that:
Answer
  • Updates data stored in Windows servers
  • Manages the services that run on a server
  • Updates licensing for Windows servers
  • Manages updates for Microsoft software

Question 50

Question
The purpose of Microsoft Baseline Security Analyzer is to:
Answer
  • List system vulnerabilities.
  • Apply all current patches to a server.
  • Set permissions to a default level.
  • Correct a company's security state.

Question 51

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. If your computer is on a domain, your network administrator can reset your password. [blank_start][answer choice][blank_end] An administrator account can reset a password for a standard user account. [blank_start][answer choice][blank_end] There is a risk of losing access to encrypted files if a password is reset. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 52

Question
In Internet Explorer 8, the InPrivate Browsing feature prevents:
Answer
  • Unauthorized private data input.
  • Unencrypted communication between the client computer and the server.
  • User credentials from being sent over the Internet.
  • Any session data from being stored on the computer.

Question 53

Question
Which enables you to change the permissions on a folder?
Answer
  • Take ownership
  • Extended attributes
  • Auditing
  • Modify

Question 54

Question
To prevent users from copying data to removable media, you should:
Answer
  • Lock the computer cases
  • Apply a group policy
  • Disable copy and paste
  • Store media in a locked room

Question 55

Question
Which technology enables you to filter communications between a program and the Internet?
Answer
  • RADIUS server
  • Antivirus software
  • Software firewall
  • BitLocker To Go

Question 56

Question
This question requires that you evaluate the underlined text to determine if it is correct. The first line of defense against attacks from the Internet is a software firewall. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed'' if the underlined text makes the statement correct.
Answer
  • hardware firewall
  • virus software
  • radius server
  • No change is needed

Question 57

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. BitLocker to Go Reader allows you to encrypt drives. [blank_start][answer choice][blank_end] BitLocker to Go Reader requires drives that are encrypted using a password. [blank_start][answer choice][blank_end] BitLocker to Go works on Windows Vista and Windows XP. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 58

Question
Which type of firewall allows for inspection of all characteristics of a packet?
Answer
  • NAT
  • Stateful
  • Stateless
  • Windows Defender

Question 59

Question
You suspect a user's computer is infected by a virus. What should you do first?
Answer
  • Restart the computer in safe mode
  • Replace the computer's hard disk drive
  • Disconnect the computer from the network
  • Install antivirus software on the computer

Question 60

Question
You need to prevent unauthorized users from reading a specific file on a portable computer if the portable computer is stolen. What should you implement?
Answer
  • File-level permissions
  • Advanced Encryption Standard (AES)
  • Folder-level permissions
  • Distributed File System (DFS)
  • BitLocker

Question 61

Question
Basic security questions used to reset a password are susceptible to:
Answer
  • Hashing
  • Social engineering
  • Network sniffing
  • Trojan horses

Question 62

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. DNSSEC prevents spoofing of query responses. [blank_start][answer choice][blank_end] Client can verify that DNS server that they are communicating with is legitimate. [blank_start][answer choice][blank_end] DNSSEC prevents man-in-the-middle attacks for DNS queries. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 63

Question
Which is a special folder permission?
Answer
  • Read
  • Modify
  • Write
  • Delete

Question 64

Question
Network Access Protection (NAP) enables administrators to control access to network resources based on a computer's:
Answer
  • Encryption level
  • Warranty
  • Physical location
  • Configuration

Question 65

Question
A mail system administrator scans for viruses in incoming emails to increase the speed of mail processing. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • Decrease the chances of a virus getting to a client machine
  • Verify that the senders of the messages are legitimate
  • Ensure that all links in the messages are trustworthy
  • No change is needed.

Question 66

Question
Before you deploy Network Access Protection (NAP), you must install:
Answer
  • Internet Information Server (IIS)
  • Network Policy Server (NPS)
  • Active Directory Federation Services
  • Windows Update Service

Question 67

Question
The company that you work for wants to set up a secure network, but they do not have any servers. Which three security methods require the use of a server? (Choose three.)
Answer
  • 802.1x
  • WPA2 Personal
  • WPA2 Enterprise
  • RADIUS
  • 802.11ac

Question 68

Question
What are three major attack vectors that a social engineering hacker may use? (Choose three.)
Answer
  • Telephone
  • Reverse social engineering
  • Waste management
  • Honey pot systems
  • Firewall interface

Question 69

Question
Password history policies are used to prevent:
Answer
  • Brute force attacks
  • Users from sharing passwords
  • Social engineering
  • Passwords from being reused immediately

Question 70

Question
E-mail bombing attacks a specific entity by:
Answer
  • Redirecting all e-mail to another entity
  • Sending high volumes of e-mail
  • Tracing e-mail to the destination address
  • Triggering high levels of security alerts

Question 71

Question
Which two are included in an enterprise antivirus program? (Choose two.)
Answer
  • Attack surface scanning
  • On-demand scanning
  • Packet scanning
  • Scheduled scanning

Question 72

Question
The Windows Firewall protects computers from unauthorized network connections. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed'' if the underlined text makes the statement correct.
Answer
  • Email viruses
  • Phishing scams
  • Unencrypted network access
  • No change is needed

Question 73

Question
When conducting a security audit the first step is to:
Answer
  • Inventory the company's technology assets
  • Install auditing software on your servers
  • Set up the system logs to audit security events
  • Set up a virus quarantine area

Question 74

Question
Setting a minimum password age restricts when users can:
Answer
  • Request a password reset
  • Change their passwords
  • Log on by using their passwords
  • Set their own password expiration

Question 75

Question
The purpose of a digital certificate is to verify that a:
Answer
  • Public key belongs to a sender.
  • Computer is virus-free.
  • Private key belongs to a sender.
  • Digital document is complete.

Question 76

Question
You create a new file in a folder that has inheritance enabled. By default, the new file:
Answer
  • Takes the permissions of the parent folder
  • Does not take any permissions
  • Takes the permissions of other folders in the same directory
  • Takes the permissions of other files in the same directory

Question 77

Question
Dumpster diving refers to a physical threat that a hacker might use to look for information about a computer network. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • Phishing
  • Malware
  • Reverse Social engineering
  • No change is needed

Question 78

Question
You need to grant a set of users write access to a file on a network share. You should add the users to:
Answer
  • A security group
  • The Authenticated Users group
  • The Everyone group
  • A distribution group

Question 79

Question
Your company requires that users type a series of characters to access the wireless network. The series of characters must meet the following requirements: ✑ Contains more than 15 characters ✑ Contains at least one letter ✑ Contains at least one number ✑ Contains at least one symbol Which security technology meets these requirements?
Answer
  • WEP
  • WPA2 PSK
  • WPA2 Enterprise
  • MAC filtering

Question 80

Question
The manager of a coffee shop hires you to securely set up WiFi in the shop. To keep computer users from seeing each other, what should you use with an access point?
Answer
  • Client bridge mode
  • Client isolation mode
  • MAC address filtering
  • Client mode

Question 81

Question
You have two servers that run Windows Server. All drives on both servers are formatted by using NTFS. You move a file from one server to the other server. The file's permissions in the new location will:
Answer
  • Enable full access to the everyone group
  • Restrict access to the Administrators group
  • Inherit the destination folder's permissions
  • Retain the original folder's permissions

Question 82

Question
Which three elements does HTTPS encrypt? (Choose three.)
Answer
  • Browser cookies
  • Server IP address
  • Port numbers
  • Website URL
  • Login information

Question 83

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. Honey pots are primarily used to attract potential attackers or hackers. [blank_start][answer choice][blank_end] By setting up a honey pot, an administrator can get insightful information by the attacker, such as the IP address. [blank_start][answer choice][blank_end] A honey pot is an appliance or piece of software that allows or denies network access based on a preconfigured set of rules. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 84

Question
Shredding documents helps prevent:
Answer
  • Man-in-the-middle attacks
  • Social engineering
  • File corruption
  • Remote code execution
  • Social networking

Question 85

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. By using NAP, administrators can place non-compliant computers onto restricted networks. [blank_start][answer choice][blank_end] All computers that are not in compliance with NAP policies require manual intervention to be brought into compliance. [blank_start][answer choice][blank_end] NAP can enforce that client computers are running a firewall. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 86

Question
What are three examples of two-factor authentication? (Choose three.)
Answer
  • A fingerprint and a pattern
  • A password and a smart card
  • A username and a password
  • A password and a pin number
  • A pin number and a debit card

Question 87

Question
Passwords that contain recognizable words are vulnerable to a:
Answer
  • Denial of Service attack
  • Hashing attack
  • Dictionary attack
  • Replay attack

Question 88

Question
A brute force attack:
Answer
  • Uses response filtering
  • Tries all possible password variations
  • Uses the strongest possible algorithms
  • Targets all the ports

Question 89

Question
The purpose of User Account Control (UAC) is to:
Answer
  • Encrypt the user's account
  • Limit the privileges of software
  • Secure your data from corruption
  • Facilitate Internet filtering

Question 90

Question
You are setting up Remote Desktop on your computer. Your computer is a member of a domain. Your firewall configuration is shown in the following image: You need to allow Remote Desktop to be able to get through your firewall for users on your company's network. Which settings should you enable?
Image:
5 (binary/octet-stream)
Answer
  • Remote Assistance: Home/Work (Private)
  • Remote Desktop: Public
  • Remote Desktop: Home/Work (Private)
  • Remote Assistance: Domain

Question 91

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. Tools like Microsoft Security Compliance Manager and Microsoft Baseline Security Analyzer can assist with server hardening. [blank_start][answer choice][blank_end] Administrator passwords may contain ASCII characters generated by a combination of the ALT key and three digits on the numeric keypad. [blank_start][answer choice][blank_end] The removal of unused registry entries and executables increases the surface vulnerability of the server. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 92

Question
Windows Firewall is a built-in. host-based, stateless firewall. Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • Stateful
  • Network layer
  • Packet filter
  • No change is needed

Question 93

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. FAT32 has built-in security features that control user access. [blank_start][answer choice][blank_end] NFTS has built-in security features that control file access. [blank_start][answer choice][blank_end] All users on the same FAT32 file system have access rights to all files. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 94

Question
An attorney hires you to increase the wireless network security for the law firm's office. The office has a very basic network, with just a modem and a router. Which of these security modes offers the highest security?
Answer
  • WPA-Personal
  • WEP
  • WPA2-Personal
  • WPA-Enterprise

Question 95

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. Smart cards can be used in biometrics-based systems. [blank_start][answer choice][blank_end] Smart cards can be read from distances of several inches to many yards. [blank_start][answer choice][blank_end] Smart cards provide a means of securely storing data on the card. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 96

Question
What is the primary advantage of using Active Directory Integrated Zones?
Answer
  • Zone encryption
  • Password protection
  • Non-repudiation
  • Secure replication

Question 97

Question
You sign up for an online bank account. Every 6 months, the bank requires you to change your password. You have changed your password 5 times in the past. Instead of coming up with a new password, you decide to use one of your past passwords, but the bank's password history prevents you on doing so. Select the correct answer if the underlined text does not make the statement correct Select "No change is needed" if the underlined text makes the statement correct.
Answer
  • Minimum password age
  • Maximum password duration
  • Password complexity
  • No change is needed.

Question 98

Question
You have a Windows 7 desktop computer, and you create a Standard User account for your roommate so that he can use the desktop from time to time. Your roommate has forgotten his password. Which two actions can you take to reset the password? (Choose two.)
Answer
  • Use your password reset disk.
  • Use your administrator account.
  • Boot into Safe Mode with your roommate's account.
  • From your roommate's account press CTRL+ALT+DELETE, and then click Change a password.

Question 99

Question
Which password attack uses all possible alpha numeric combinations?
Answer
  • Social engineering
  • Brute force attack
  • Dictionary attack
  • Rainbow table attack

Question 100

Question
You need to limit the programs that can run on client computers to a specific list. Which technology should you implement?
Answer
  • Windows Security Center
  • Security Accounts Manager
  • System Configuration Utility
  • AppLocker group policies

Question 101

Question
Creating MD5 hash for files is an example of ensuring what?
Answer
  • Confidentiality
  • Availability
  • Least privilege
  • Integrity

Question 102

Question
Physically securing servers prevents:
Answer
  • Theft
  • Compromise of the certificate chain
  • Man-in-the middle attacks
  • Denial of Service attacks

Question 103

Question
Which of the following describes a VLAN?
Answer
  • It connects multiple networks and routes data packets.
  • It is a logical broadcast domain across physical subnets.
  • It is a subnetwork that reveals a company's externally facing resources to the public network.
  • It allows different network protocols to communicate between different network segments.

Question 104

Question
E-mail spoofing:
Answer
  • Forwards e-mail messages to all contacts
  • Copies e-mail messages sent from a specific user
  • Obscures the true e-mail sender
  • Modifies e-mail routing logs

Question 105

Question
The client computers on your network are stable and do not need any new features. Which is a benefit of applying operating system updates to these clients?
Answer
  • Keep the software licensed
  • Keep the server ports available
  • Update the hardware firewall
  • Close existing vulnerabilities

Question 106

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. Biometrics are used to authenticate users. [blank_start][answer choice][blank_end] Biometric data is usually encrypted when it is gathered.[blank_start][answer choice][blank_end] An example of a biometric device is a fingerprint scanner. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 107

Question
What does implementing Windows Server Update Services (WSUS) allow a company to manage?
Answer
  • Shared private encryption key updates
  • Updates to Group Policy Objects
  • Active Directory server replication
  • Windows updates for workstations and servers

Question 108

Question
The primary purpose of Network Access Protection (NAP) is to prevent:
Answer
  • Loss of data from client computers on a network.
  • Non-compliant systems from connecting to a network.
  • Users on a network from installing software.
  • Unauthorized users from accessing a network.

Question 109

Question
You are trying to establish communications between a client computer and a server. The server is not responding. You confirm that both the client and the server have network connectivity. Which should you check next?
Answer
  • Microsoft Update
  • Data Execution Prevention
  • Windows Firewall
  • Active Directory Domains and Trusts

Question 110

Question
You are an intern at Litware, Inc. Your manager asks you to make password guess attempts harder by limiting login attempts on company computers. What should you do?
Answer
  • Enforce password sniffing.
  • Enforce password history.
  • Make password complexity requirements higher.
  • Implement account lockout policy.

Question 111

Question
You would implement a wireless intrusion prevention system to:
Answer
  • Prevent wireless interference
  • Detect wireless packet theft
  • Prevent rogue wireless access points
  • Enforce SSID broadcasting

Question 112

Question
What is the standard or basic collection of NTFS permissions?
Answer
  • Read and execute, read, write, full control, modify, list folder contents
  • Change permissions, read permissions, write permissions
  • Read attributes, list folder/read data, traverse folder/execute file
  • Create files/write data, create folders/append data, take ownership

Question 113

Question
You are an intern at Wide World Importers and help manage 1000 workstations. All the workstations are members of an Active Domain. You need to push out an internal certificate to Internet Explorer on all workstations. What is the quickest method to do this?
Answer
  • Local policy
  • Logon script
  • Windows Update
  • Group policy

Question 114

Question
Your supervisor asks you to review file permission settings on the application.bat file. You need to report which file system the file is on and the type of permission the file has. You review the application Properties dialog box shown in the following image: Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point. The "cygwin.bat" file in the image is currently on the [blank_start][answer choice][blank_end] file system. [blank_start][answer choice][blank_end] permissions are currently being displayed for the "cygwin.bat" file.
Image:
6 (binary/octet-stream)
Answer
  • FAT16
  • FAT32
  • NTFS
  • Basic
  • Advanced
  • Full Control

Question 115

Question
How does the sender policy framework (SPF) aim to reduce spoofed email?
Answer
  • It provides a list of IP address ranges for particular domains so senders can be verified.
  • It includes an XML policy file with each email that confirms the validity of the message.
  • It lists servers that may legitimately forward mail for a particular domain.
  • It provides an encryption key so that authenticity of an email message can be validated.

Question 116

Question
You are trying to connect to an FTP server on the Internet from a computer in a school lab. You cannot get a connection. You try on another computer with the same results. The computers in the lab are able to browse the Internet. You are able to connect to this FTP server from home. What could be blocking the connection to the server?
Answer
  • A layer-2 switch
  • A wireless access point
  • A firewall
  • A layer-2 hub

Question 117

Question
You are an intern for a company where your manager wants to be sure you understand the social engineering threats that may occur. Your manager emphasizes the principles of the Microsoft Defense-in-Depth Security Model shown in the following image: Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point. The [blank_start][answer choice][blank_end] defense targets staff within an organization, explaining what to do, when, why, and by whom. The overarching defense of the Microsoft Defense-in-Depth Security Model is [blank_start][answer choice][blank_end]
Image:
7 (binary/octet-stream)
Answer
  • Policies, Procedures, and Awareness
  • Data Defenses
  • Physical Security
  • Policies, Procedures, and Awareness
  • Network Defenses
  • Data Defenses

Question 118

Question
Humongous Insurance is an online healthcare insurance company. During an annual security audit a security firm tests the strength of the company's password policy and suggests that Humongous Insurance implement password history policy. What is the likely reason that the security firm suggests this?
Answer
  • Past passwords were easily cracked by the brute force method.
  • Past passwords of users contained dictionary words.
  • Previous password breaches involved use of past passwords.
  • Past passwords lacked complexity and special characters.

Question 119

Question
Which enables access to all of the logged-in user's capabilities on a computer?
Answer
  • Java applets
  • ActiveX controls
  • Active Server Pages (ASP)
  • Microsoft Silverlight

Question 120

Question
Where should you lock up the backup tapes for your servers?
Answer
  • The server room
  • A filing cabinet
  • The tape library
  • An offsite fire safe

Question 121

Question
Which provides the highest level of security in a firewall?
Answer
  • Stateful inspection
  • Outbound packet filters
  • Stateless inspection
  • Inbound packet filters

Question 122

Question
Alice and Bob are exchanging messages with each other. Chuck modifies the messages sent between Alice and Bob as shown in the following image: Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point. The scenario demonstrated is a [blank_start][answer choice][blank_end] attack. Alice and Bob could add a [blank_start][answer choice][blank_end] to avoid this type of attack.
Image:
8 (binary/octet-stream)
Answer
  • man in the middle
  • phishing
  • denial of service
  • checksum
  • digital signature
  • timestamp

Question 123

Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No. Each correct selection is worth one point. An intruder can spoof MAC addresses to get around MAC address filtering. [blank_start][answer choice][blank_end] Intruders can find a wireless network if the Service Set Identifier (SSID) is hidden. [blank_start][answer choice][blank_end] WEP security is strong as long as it has a 128-bit key. [blank_start][answer choice][blank_end]
Answer
  • Yes
  • No
  • Yes
  • No
  • Yes
  • No

Question 124

Question
You are preparing a local audit policy for your workstation. No auditing is enabled. The settings of your policy are shown in the following image: Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point. In order to log each time the computer validates account credentials, the [blank_start][answer choice][blank_end] policy needs to be enabled. You need to log each time someone reboots the workstation. The [blank_start][answer choice][blank_end] policy will log a reboot of the computer.
Image:
9 (binary/octet-stream)
Answer
  • Audit account logon events
  • Audit logon events
  • Audit object access
  • Audit system events
  • Audit process tracking
  • Audit logon events
Show full summary Hide full summary

Want to create your own Quizzes for free with GoConqr? Learn more.

Similar

Bayonet Charge flashcards
katiehumphrey
A-level French Vocabulary
Andrea Leyden
Resumo para o exame nacional - Fernando Pessoa Ortónimo, Alberto Caeiro , Ricardo Reis e Álvaro Campos
miminoma
P1 quiz
I M Wilson
Globalisation Case Studies
annie
GCSE Computing: Hardware
Yasmin F
CHARACTERS IN OF MICE AND MEN
jessicasusanevans
GCSE Geography - Causes of Climate Change
Beth Coiley
The Effects of Climate Change
j. stu
Introduction to the Atom
Derek Cumberbatch
Účto Fífa 2/6
Bára Drahošová
Browse Library