Microsoft MTA Security Fundamentals Practice Test - 98-367 Exam Practice Test

Question 1
You need to limit the programs that can run on client computers to a specific list.
Which technology should you implement?

Correct Answer: D
Question 2
Alice and Bob are exchanging messages with each other. Chuck modifies the messages sent between Alice and Bob as shown in the following image:

Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point.

Correct Answer:

Explanation
First answer - man in the middle
Second answer - digital signature
The usual way to prevent the man-in-the-middle attack is to use a public key cryptosystem capable of providing digital signatures. For set up, the parties must know each others public keys in advance. After the shared secret has been generated, the parties send digital signatures of it to each other. The man-in-the-middle can attempt to forge these signatures, but fails because he cannot fake the signatures.
Question 3
What are three examples of factors required for multi-factor authentication? (Choose three.)

Correct Answer: B,C,D
Question 4
Your supervisor asks you to review file permission settings on the application.bat file.
You need to report which file system the file is on and the type of permission the file has.
You review the application Properties dialog box shown in the following image:

Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point.

Correct Answer:

Question 5
E-mail spoofing:

Correct Answer: C
Question 6
The primary purpose of Network Access Protection (NAP) is to prevent:

Correct Answer: D
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 7
The WPA2 PreShared Key (PSK) is created by using a passphrase (password) and salting it with the WPS PIN.
Select the correct answer if the underlined text does not make the statement correct. Select "No change is needed" if the underlined text makes the statement correct.

Correct Answer: A
Question 8
Match the authentication protocol with its description.
Instructions: To answer, drag the appropriate authentication protocol from the column on the left to its description on the right. Each authentication protocol may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Note: Each correct match is worth one point
Correct Answer:
Question 9
What does implementing Windows Server Update Services (WSUS) allow a company to manage?

Correct Answer: B
Question 10
Account lockout policies are used to prevent which type of security attack?

Correct Answer: D
Question 11
A group of users has access to Folder A and all of its contents. You need to prevent some of the users from accessing a subfolder inside Folder A.
What should you do first?

Correct Answer: A
Question 12
Your supervisor asks you to review file permission settings on the application.bat file.
You need to report which file system the file is on and the type of permission the file has.
You review the application Properties dialog box shown in the following image:

Correct Answer:

Explanation
NTFS
Full control
Question 13
The purpose of a digital certificate is to verify that a:

Correct Answer: B
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 14
Windows Server Update Services (WSUS) is a tool that:

Correct Answer: B
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 15
You are an intern for a company where your manager wants to be sure you understand the social engineering threats that may occur. Your manager emphasizes the principles of the Microsoft Defense-in-Depth Security Model shown in the following image:

Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth one point.

Correct Answer:

Explanation
First Answer - Policies, Procedures, and Awareness
Second Answers - Data Defenses