Microsoft Microsoft Certifications 98-367 Questions & Answers

• Question 191:

  E-mail spoofing:

  A. Forwards e-mail messages to all contacts

  B. Copies e-mail messages sent from a specific user

  C. Obscures the true e-mail sender

  D. Modifies e-mail routing logs

  Correct Answer: C

  Reference: http://www.microsoft.com/mscorp/safety/technologies/senderid/technology.mspx

• Question 192:

  You need to install a domain controller in a branch office. You also need to secure the information on the domain controller. You will be unable to physically secure the server. Which should you implement?

  A. Read-Only Domain Controller

  B. Point-to-Point Tunneling Protocol (PPTP)

  C. Layer 2 Tunneling Protocol (L2TP)

  D. Server Core Domain Controller

  Correct Answer: A

  A read-only domain controller (RODC) is a new type of domain controller in the Windows Server?2008 operating system. With an RODC, organizations can easily deploy a domain controller in locations where physical security cannot be guaranteed. An RODC hosts read-only partitions of the Active Directory?Domain Services (AD DS) database.

  References: http://technet.microsoft.com/en-us/library/cc732801(v=ws.10).aspx

• Question 193:

  Which enables access to all of the logged-in user's capabilities on a computer?

  A. Java applets

  B. ActiveX controls

  C. Active Server Pages (ASP)

  D. Microsoft Silverlight

  Correct Answer: B

• Question 194:

  To keep third-party content providers from tracking your movements on the web, enable InPrivate Browsing.

  Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed'' if the underlined text makes the statement correct.

  A. InPrivate Filtering

  B. SmartScreen Filter

  C. Compatibility Mode

  D. No change is needed

  Correct Answer: A

• Question 195:

  Cookies impact security by enabling: (Choose two.)

  A. Storage of Web site passwords.

  B. Higher security Web site protections.

  C. Secure Sockets Layer (SSL).

  D. Web sites to track browsing habits.

  Correct Answer: AD

  Reference: http://en.wikipedia.org/wiki/HTTP_cookie

• Question 196:

  Which two security settings can be controlled by using group policy? (Choose two.)

  A. Password complexity

  B. Access to the Run... command

  C. Automatic file locking

  D. Encrypted access from a smart phone

  Correct Answer: AB

  Reference: http://technet.microsoft.com/en-us/library/cc875814.aspx

• Question 197:

  What are three major attack vectors that a social engineering hacker may use? (Choose three.)

  A. Telephone

  B. Reverse social engineering

  C. Waste management

  D. Honey pot systems

  E. Firewall interface

  Correct Answer: ABC

• Question 198:

  The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting it with the WPS PIN.

  Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

  A. Service Set Identifier (SSID)

  B. Admin password

  C. WEP key

  D. No change is needed

  Correct Answer: A

• Question 199:

  Humongous Insurance is an online healthcare insurance company. During an annual security audit a security firm tests the strength of the company's password policy and suggests that Humongous Insurance implement password history policy.

  What is the likely reason that the security firm suggests this?

  A. Past passwords were easily cracked by the brute force method.

  B. Past passwords of users contained dictionary words.

  C. Previous password breaches involved use of past passwords.

  D. Past passwords lacked complexity and special characters.

  Correct Answer: B

• Question 200:

  What is an example of non-propagating malicious code?

  A. A back door

  B. A hoax

  C. A Trojan horse

  D. A worm

  Correct Answer: A