98-367

• A virus does not need a carrier in order to propagate itself.

• A polymorphic virus changes its code so that it cannot be detected easily.

• A stealth virus hides itself in the master boot record.

• A stateful firewall allows only packets matching known active connections; others are rejected.

• An example of a stateless firewall is an access list on a router.

• Dedicated hardware firewalls are primarily stateless.

• Phishing is a form of online identity theft.

• Antivirus apps have the latest blacklists for email addresses and domains and always keep those up to date.

• Spoofing is the act of sending large amounts of unrequested emails.

• Application

• Network

• Failed logon events

• Account lockout after a reasonable number of failed logon attempts

• DNSSEC helps prevent pharming and man-in-the-middle attacks.

• DNSSEC uses a digital signature to create a chain of authority.

• DNSSEC is proprietary to Microsoft Domain Name Servers.

• IPSec uses digital signatures to create a chain of authority.

• IPSec uses digital signatures to create a chain of authority.

• IPSec is used to create a secure tunnel between two computing devices.

• IPSec encrypts data packets using AH.

• B

• C

• D

• A

• The tool used to view audit logs is Event Viewer.

• You can audit logon failures to warn of hacking attacks.

• You cannot limit the size of audit logs.

• Trojan horses appear to be legitimate apps.

• Worms are self-replicating programs designed to slow a computer by overusing its system resources.

• Spyware is a government-developed virus used in espionage.