98-367 Exam Questions

All of the following are valid cryptographic hash functions EXCEPT:

In regards to secure coding practices, why is input validation important?

Which of the following devices would MOST likely have a DMZ interface?

Which of the following application security testing techniques is implemented when an automated system generates random input data?

Certificates are used for: (Select TWO).

Which of the following is a hardware based encryption device?

Use of a smart card to authenticate remote servers remains MOST susceptible to which of the following attacks?

Separation of duties is often implemented between developers and administrators in order to separate which of the following?

You need to be able to gather information about a running program. Which type of auditing should you implement?

The purpose of Windows Server Update Services (WSUS) is to:

A process by which DNS zone data is obtained by an attacker is referred to as:

Media Access Control (MAC) filtering enables you to:

What are two examples of physical site security? (Choose two.)

You need to hide internal IP addresses from the Internet while maintaining client access to the Internet. What should you implement?

A malicious user who intercepts and modifies communications is known as a:

You have an application that uses IPsec to secure communications between an Internet client and a server on the internal network. To which network security service must the IPsec c...

You want to prevent external users from acquiring information about your network. You should implement a:

What are three examples of factors required for multi-factor authentication? (Choose three.)

What displays a user's level of access to a particular file or folder on the server?

You are trying to enable BitLocker on your father's computer. What is the purpose of the Trusted Platform Module (TPM) when it is used by BitLocker?

Which type of password attack attempts to guess passwords by using a list of common passwords?

Malicious software designed to collect personally identifiable information is referred to as :

Kerberos prevents:

You manage 50 Windows workstations in a computer lab. All workstations belong to the lab Active Directory domain. You need to implement several audit policies on each workstation i...

You have a Windows 2012 R2 Server. Security logging is enabled. You use this log for several audits of the server. You need to make sure the log is not overwritten when it reaches...

The name of a particular wireless LAN that is broadcast on a network is referred to as a:

This question requires that you evaluate the underlined text to determine if it is correct. An example of physical security for a laptop is a/an cable lock. Instructions: Review th...

The reason for implementing Service Set IDentifier (SSID) masking is to:

Email spoofing:

This question requires that you evaluate the underlined text to determine if it is correct. To determine which action, if any, to take on an inbound message, anti-spam and antiviru...

What are two reasons to implement VLANs? (Choose two.)

This question requires that you evaluate the underlined text to determine if it is correct. Dedicated perimeter firewalls often provide a service named static packet filtering, whi...

Installing uninterruptible power sources to your servers is an example of ensuring:

Setting a database to run on a cluster of servers is an example of applying:

What are three ways you can reduce the number of opportunities that attackers have to exploit potential weaknesses or vulnerabilities? (Choose three.)

You are a network administrator. All computers run the Microsoft Edge browser. You need to prevent web cookies from being saved. What should you enforce?

Encrypting a hard disk is an example of ensuring:

You have a new computer and want to restrict other people from replacing the operating system. Which action prevents a user from installing an alternate operating system by using p...

You have an application that communicates by using plain text. You want to secure communications between the application and a server at the network layer. What should you implemen...

The process of creating a barrier between domain members and non-domain members by using IPsec policies is referred to as:

Which networking protocol provides centralized authentication, authorization, and accounting?

This question requires that you evaluate the underlined text to determine if it is correct. Malware is any kind of unwanted software that is installed without your consent. Instruc...

A Virtual Private Network (VPN) is a/an:

Your anti-spam program is blocking emails from a particular sender. Your company needs to receive emails from this sender. What should you do?

You need to give a standard user permission to run a program as an administrator. How should you set up the program shortcut to accomplish this?