98-367 PT1

Which attack listens to network traffic of a computer resource?

• Resource gathering
• Denial of service
• ARP poisoning
• Eavesdropping

The default password length for a Windows Server domain controller is:

• 0
• 5
• 7
• 14

What does NAT do?

• It encrypts and authenticates IP packets.
• It provides caching and reduces network traffic.
• It translates public IP addresses to private addresses and vice versa.
• It analyzes incoming and outgoing traffic packets.

Role separation improves server security by:

•  Enforcing principle of least privilege.
• Installing applications on separate hard disks.
• Physically separating high security servers from other servers.
• Placing servers on separate VLANs.

The Graphic Design Institute hires you to help them set up a server for their 20-person team.
As a general practice of hardening the server, you start by performing which two tasks?

• Disable the guest account & Rename the admin account.
• Remove the account lockout policy & Format partitions with FAT32.

A network sniffer is software or hardware that:

• Records user activity and transmits it to the server
• Captures and analyzes network communication
• Protects workstations from intrusions
• Catalogs network data to create a secure index

Alice sends her password to the game server in plaintext. Chuck is able to observe her password as shown in the following image:
What type of attack is this?
How can she avoid this attack?

• man in the middle
  don't send a plaintext pswd
• denial of service
  only send pswds to known companies
• eavesdropping
  never send plaintext pswds
• none of the above

Your password is 1Vu*cI!8sT.
Which attack method is your password vulnerable to?

• Rainbow table
• Brute force
• Spidering
• Dictionary

A group of users has access to Folder A and all of its contents. You need to prevent some of the users from accessing a sub folder inside Folder A. What should you do first?

• Disable folder sharing
• Hide the folder
• Change the owner
• Block inheritance

Many Internet sites that you visit require a user name and password. How should you secure these passwords?

•  Save them to a text file
• Enable session caching
• Configure the browser to save passwords
• Save them to an encrypted file