98-367 Online Practice Questions and Answers

Correct Answer:

Correct Answer: A

Correct Answer: BD

Correct Answer: C

Correct Answer: C

Reference: http://en.wikipedia.org/wiki/Wireless_intrusion_prevention_system

Correct Answer: A

Domain name space consists of a tree of domain names. Each node or leaf in the tree has zero or more resource records, which hold information associated with the domain name. The tree sub- divides into zones starting at the root zone.

Answer: B is incorrect. The definitive descriptions of the rules for forming domain names appear in RFC 1035, RFC 1123, and RFC 2181. A domain name consists of one or more parts, technically called labels that are conventionally

concatenated, and delimited by dots.

Answer: C is incorrect. Domain Name System (DNS) is a distributed hierarchical naming system for computers, services, or other resources connected to the Internet or a private network. It associates various information with domain names

assigned to each of the participants.

Answer: D is incorrect. An authoritative name server is a name server that gives answers that have been configured by an original source, for example, the domain administrator or by dynamic DNS methods, in contrast to the answers that

were obtained via a regular DNS query to one more name server. An authoritative-only name server only returns answers to the queries about domain names that have been specifically configured by the administrator.

Correct Answer: ABD

Answer: B, A, and D

The IPsec protocol has three major components:

1.Authentication Header (AH)

2.Encapsulating Security Payload (ESP)

3.Internet Key Exchange (IKE)

Answer: C is incorrect. There is no such component of the IPSec protocol as Internet Encryption Key.

Correct Answer: C

The group policies are used to disable the use of floppy drives or USB drives to ensure physical security of desktop computers. Several computers are able to use the mechanism of attaching a locking device to the desktops, but disabling USB and floppy drives can disable a larger set of threats. Answer: D is incorrect. While stressing the Con?dentiality, Integrity, and Availability triangle in the training of users, the process of providing availability is related to security training to ensure the protection against a Distributed Denial of Services attack.

Correct Answer: C

The attack surface is a software environment where codes can be run by unauthenticated users. By improving information security, the attack surface of a system or software can be reduced. Although attack surface reduction helps prevent

security failures; it does not mitigate the amount of damage an attacker could inflict once a vulnerability is found.

Answer: B is incorrect. A Denial-of-Service (DoS) attack is mounted with the objective of causing a negative impact on the performance of a computer or network. It is also known as network saturation attack or bandwidth consumption attack.

Attackers make DoS attacks by sending a large number of protocol packets to a network. The problems caused by a DoS attack are as follows: Saturate network resources.

Disrupt connections between two computers, thereby preventing communications between services.

Disrupt services to a specific computer.

Answer: D is incorrect. Snooping is an activity of observing the content that appears on a computer monitor or watching what a user is typing. Snooping also occurs by using software programs to remotely monitor activity on a computer or

network device. Hackers or attackers use snooping techniques and equipment such as keyloggers to monitor keystrokes, capture passwords and login information, and to intercept e-mail and other private communications. Sometimes,

organizations also snoop their employees legitimately to monitor their use of organizations' computers and track Internet usage.

Answer: A is incorrect. Social engineering is the art of convincing people and making them disclose useful information such as account names and passwords. This information is further exploited by hackers to gain access to a user's

computer or network. This method involves mental ability of people to trick someone rather than their technical skills. A user should always distrust people who ask him for his account name, password, computer name, IP address, employee

ID, or other information that can be misused.

Correct Answer: B

The level of security set for an Internet zone is applied to all the Websites by default. Answer: C is incorrect. The level of security set for the restricted sites is applied to the sites that might potentially damage your computer, or your

information.

Answer: D is incorrect. The level of security set for the local intranet zone is applied to the Websites and content that are stored on a corporate or business network. Answer:

A is incorrect. The level of security set for the trusted sites is applied to sites that you have specifically indicated as the ones that you trust.