Microsoft Technology Associate (MTA) Security Practice Test

Browse all practice questions for the Microsoft Technology Associate (MTA) Security Practice Test. Search by topic, open any question and review its full explanation, then test yourself in the practice quiz.

Start practice testFlash cards
Microsoft Technology Associate (MTA) Security Practice Test course image
Can Administrator Passwords Feature ASCII Characters via the ALT Key?Is it true that administrator passwords can contain ASCII characters generated by the ALT key?Can Spoofing MAC Addresses Bypass Network Security?Can an intruder spoof MAC addresses to get around MAC address filtering?Creating a Secondary Administrator Account Can Boost Your Web Server's SecurityTo enhance security on a new web server, which action should you take?Discover how to effectively limit login attempts on company computersWhat should you implement to limit login attempts on company computers?Explore the Consequences of Social Engineering AttacksWhat is a common consequence of a successful social engineering attack?First Steps to Secure Your Server: Why You Should Disable the Guest AccountAs part of hardening a server for a team, what should you do first?How Cleaning Up Unused Registry Entries Impacts Server SecurityDoes the removal of unused registry entries increase the vulnerability of a server?How Physically Securing Servers Prevents TheftWhat does physically securing servers help to prevent?How to Enable Remote Desktop Access on Domain Member ComputersTo allow Remote Desktop through a firewall, which setting should be enabled on a domain member computer?How to Fix a Certificate Error That Shows Your Web Server Is Not TrustedWhat should you do to fix a certificate error indicating your web server is not trusted?How to Prevent Users from Copying Data to Removable MediaTo prevent users from copying data to removable media, what should you do?How to Safeguard Systems Against Buffer Overflow ErrorsWhat can be used to protect systems from buffer overflow errors?How User Account Control (UAC) Enhances Windows SecurityDoes User Account Control (UAC) reduce permissions to that of a standard user unless higher permissions are needed?Learn How to Fortify Your Computer Against Online AttacksWhich action can help make your computer resistant to online attacks?Understand the Impact of Dumpster Diving in CybersecurityWhat does dumpster diving refer to in cybersecurity?Understanding Account Lockout Policies and Their Role in Preventing Brute Force AttacksAccount lockout policies primarily prevent which type of attack?Understanding BitLocker as a Full Disk Encryption Feature in WindowsWhich of the following best describes BitLocker?Understanding Eavesdropping and Its Role in Network SecurityWhich attack listens to network traffic of a computer resource?Understanding File Permissions When Moving Between NTFS ServersWhen you move a file between two NTFS formatted servers, what will happen to the file's permissions?Understanding How a Digitally Signed Email Validates the SenderWhat does a digitally signed e-mail message validate?Understanding how WSUS helps manage updates for Windows systemsWhat does implementing Windows Server Update Services (WSUS) enable a company to manage?Understanding Network Address Translation: How IP Address Management Enhances SecurityWhat does NAT do?Understanding Non-Propagating Malicious Code: The Back Door ExplainedWhat is an example of non-propagating malicious code?Understanding Non-Repudiation in Network SecurityIn the context of network security, what does non-repudiation mean?Understanding Social Engineering: Common Attack Vectors to KnowWhat is a common attack vector used by social engineering hackers? (Choose three)Understanding Special Folder Permissions for File ManagementWhich special folder permission allows for deletion of files?Understanding the Benefits of Active Directory Integrated ZonesWhat is the primary benefit of Active Directory Integrated Zones?Understanding the Best Server Options for Coho Winery's NeedsFor Coho Winery's new web server, which existing server should be repurposed to avoid buying a new one?Understanding the Core of the Microsoft Defense-in-Depth Security ModelWhat overarching defense is found in the Microsoft Defense-in-Depth Security Model?Understanding the Critical Role of NPS in Network Access ProtectionBefore deploying NAP, what must be installed?Understanding the Default Password Length for Windows Server Domain ControllersWhat is the default password length for a Windows server domain controller?Understanding the Essential Purpose of Digital CertificatesWhat is the purpose of a digital certificate?Understanding the First Step in Conducting a Security AuditWhich is the first step when conducting a security audit?Understanding the Importance of a Password History PolicyWhat likely reason did the security firm have for suggesting the implementation of a password history policy?Understanding the Importance of Auditing Account Logon Events in SecurityWhat policy needs to be enabled to log events of account credential validation?Understanding the Importance of Email Virus Scanning in CybersecurityWhat is a primary goal when scanning incoming emails for viruses?Understanding the Importance of Password Complexity RequirementsWhat is the purpose of a password complexity requirement?Understanding the Importance of Password History PoliciesPassword history policies are designed to prevent what?Understanding the Importance of Wireless Intrusion Prevention SystemsWhy would a wireless intrusion prevention system be implemented?Understanding the Key Goals of CybersecurityWhat is the primary goal of cybersecurity?Understanding the Least Privilege Principle in IT SecurityWhich principle is essential in maintaining IT security?Understanding the Main Functions of Bridging on OSI Layer 3What is the main function of bridging on OSI layer 3?Understanding the Risks of Insufficient Security Training for EmployeesWhich of the following is a common consequence of insufficient security training for employees?Understanding the Role of Certificates in SSL Connection AuthenticationIn an SSL connection, what is the primary method of authentication?Understanding the Role of Digital Certificates in Online SecurityWhat is the purpose of a digital certificate?Understanding the Role of Load Balancers in Network Traffic ManagementWhich of the following systems is critical for managing network traffic?Understanding the Security of Biometric DataWhat is the nature of biometric data when it is collected?Understanding the Security Weaknesses of the FAT32 File SystemWhich of the following represents a weakness of the FAT32 file system?Understanding the Threat of Rainbow Table Attacks on Your PasswordsWhich threat is associated with the password 1Vu*cI!8sT?Understanding User-Friendly Password CharacteristicsWhich password characteristic is important for user convenience?Understanding VLANs and Their Role in Network ManagementHow can a VLAN best be described?Understanding What Digital Certificates Don’t Verify About Public KeysWhat does a digital certificate NOT verify about a public key?Understanding why recognizable words in passwords invite dictionary attacksPasswords that contain recognizable words are particularly vulnerable to which type of attack?Understanding Why WEP Security Isn't Strong Enough Even with a 128-Bit KeyIs WEP security strong as long as it has a 128-bit key?Understanding WPA2 PSK and Its Importance for Wireless SecurityWhich wireless security technology requires a long passphrase with characters, letters, numbers, and symbols?What Does a SACL Do in System Security?A system access control list (SACL) allows administrators to do what?What Happens When a DDoS Attack Strikes?What is a common consequence of a DDoS attack?What You Need to Know About Brute Force AttacksWhich password attack attempts every possible alphanumeric combination?What You Need to Know About Worms and Malware ReplicationWhich type of malware is designed to replicate itself and spread to other systems?What You Need to Know About WPA2 Enterprise Security ComponentsWhat is a necessary component for implementing WPA2 Enterprise?What’s the Real Aim of a Spam Filter?What is the primary goal of using a spam filter?Why Complex Passwords Are Essential for Keeping Your Data SafeWhat practice can help in safeguarding sensitive information stored on devices?Why Sending Passwords in Plaintext is a Big No-NoWhat is a common vulnerability in sending passwords over the internet?
More practice questions

These questions are part of the practice quiz. Start practicing

  • Which file system does NOT have built-in security features for controlling user access?
  • Which is the minimum operating system requirement for creating BitLocker-To-Go media?
  • Which of the following is a common method of securing data during transmission?
  • What is the function of a Stateful firewall?
  • What is the role of the Security Accounts Manager?
  • Which provides the highest level of security in a firewall?
  • What are two possible methods to reset a roommate's forgotten password on a Windows 7 desktop?
  • Does IPsec require network applications to be IPsec aware?
  • What does shredding documents help prevent?
  • Which security measure involves regularly updating software to fix vulnerabilities?
  • Which two features are typically found in an enterprise antivirus program? (Choose two)
  • What is the primary characteristic of email spoofing?
  • What does multifactor authentication enhance in a security system?
  • Should senior executives use administrator accounts to access sensitive data?
  • What is the primary objective of using strong passwords?
  • What is phishing primarily used for?
  • To grant users write access to a file on a network share, what should you do?
  • Can an administrator account reset a password for a standard user account?
  • Where is the best location to lock up backup tapes for your servers?
  • Which security measure can help defend against unauthorized access?
  • Is there a risk of losing access to encrypted files if a password is reset?
  • Which of the following is an effective method for preventing unauthorized physical access to a facility?
  • What should be your first action if you suspect a user's computer is infected with a virus?
  • In the context of security policies, what is the meaning of “brute force attacks”?
  • What does the Service Set Identifier (SSID) represent?
  • Which kind of backups specifically protect against data loss due to corruption or user error?
  • If a bank prevents you from using your previous passwords, which concept does this entail?
  • Are advanced audit policies applied by group policy compatible with basic audit policies?
  • What is the main purpose of User Account Control (UAC)?
  • Creating an MD5 hash for files ensures which aspect of data security?
  • How does the sender policy framework (SPF) help reduce spoofed emails?
  • Can smartcards be utilized in biometrics systems?
  • To enable auditing of all local login events, which Advanced Audit Policy needs to be activated?
  • If a server is not responding to a client computer, what should be checked next after confirming network connectivity?
  • What is a common method to secure sensitive data on a laptop?
  • Cookies can pose a security risk by enabling which of the following?
  • Can intruders find a wireless network if the Service Set Identifier (SSID) is hidden?
  • Which tool can be used to monitor network traffic for suspicious activity?
  • Which technology helps in ensuring computer configurations meet security requirements before accessing a network?
  • Can UAC notify you when additional permissions are required and ask if you want to continue?
  • What does DNSSEC primarily prevent regarding DNS queries?
  • Which three elements does HTTPS encrypt?
  • Which of the following accurately describes Windows Firewall?
  • What does setting a minimum password age restrict?
  • In Internet Explorer 8, what does the InPrivate Browsing feature primarily prevent?
  • What is the primary objective of implementing a firewall in a network?
  • Which technology is designed to filter communications between a program and the Internet?
  • What does implementing client isolation mode on a wireless network do?
  • What should Alice never do regarding her password?
  • What is the quickest method to push out an internal certificate to all workstations in an Active Domain?
  • Blocking all automated downloads and pop-ups in a browser primarily protects users from what?
  • What is the best option for preventing users from seeing each other on a WiFi network?
  • What is a benefit of applying operating system updates to stable client computers?
  • What happens if a user doesn't meet the requirements for a network password?
  • In ensuring user privacy, what is an essential step to consider?
  • What role does encryption play in data security?
  • Which of the following is a primary benefit of using DNSSEC?
  • To log access to files in the C:\temp directory, which Advanced Audit Policy should be enabled?
  • Which option allows you to change permissions on a folder?
  • Can tools like Microsoft Security Compliance Manager assist with server hardening?
  • Which technology enables access to all of the logged-in user's capabilities on a computer?
  • To allow a log file to be opened as an administrator, you should...
  • What type of domain controller should be installed by Humongous Insurance in a less secure branch office?
  • Which type of attack seeks to capture data transmitted between a user and a web application?
  • Which security methods require the use of a server? (Choose three)
  • When should system administrators use a standard user account?
  • Which of the following is NOT an example of two-factor authentication?
  • Which solution should be implemented to secure a domain controller that cannot be physically secured?
  • What could be blocking the connection to an FTP server from a school lab computer, if the computers can browse the Internet?
  • What is a recommended practice to enhance security when using a web application?
  • Basic security questions used to reset a password are susceptible to which form of attack?
  • What is the purpose of the Microsoft Baseline Security Analyzer?
  • What is the overall goal of User Account Control (UAC)?
  • How can clients verify the legitimacy of a DNS server?
  • What does Active Directory primarily control in an organization?
  • What is one of the primary benefits of keeping a server updated?
  • What is a benefit of using password expiration?
  • Does BitLocker To Go Reader allow for encryption of drives?
  • What does implementing a group policy achieve in a network?
  • What characterizes a brute force attack?
  • What is the first step to prevent some users from accessing a subfolder?
  • Which measure can protect against unauthorized changes to a computer network?
  • What type of access control restricts access based on the identity of users?
  • Which of the following statements about wireless security is false?
  • What is Chuck doing if he observes Alice's password sent in plain text?
  • Which characteristic is NOT recommended for a strong domain password?
  • In which scenario is a logic bomb an example of a security threat?
  • Which two security settings can be controlled using group policy?
  • What role does RADIUS play in a secure network implementation?
  • To prevent third-party content providers from tracking your movements, what feature should you enable?
  • What is the purpose of salting in the WPA2 PSK process?
  • What can Network Access Protection (NAP) enforce regarding client computers?
  • Which measure can help mitigate brute force attacks on passwords?
  • What is the primary function of the Windows Firewall?
  • How does role separation improve server security?
  • What is a common method for password collection?
  • What is the main function of a network sniffer?
  • What are two indicators that an email may be a phishing attempt?
  • Which defense specifically targets staff within an organization regarding social engineering threats?
  • If a portable computer is stolen, what should you implement to prevent unauthorized users from reading a specific file?
  • What is one piece of information an administrator can obtain from a honey pot?
  • What is the primary purpose of a honey pot?
  • Which element is NOT essential in preventing phishing attacks?
  • The attack scenario where Chuck modifies messages between Alice and Bob is known as what type of attack?
  • What type of certificate should a secure public Web server on the Internet have?
  • What addition could Alice and Bob implement to avoid the "man in the middle" attack?
  • What is the main purpose of Network Access Protection (NAP)?
  • Can IPsec encrypt data?
  • What technique is used to secure passwords by converting them into unreadable strings?
  • When creating a new file in a folder with inheritance enabled, what happens to the file?
  • What does Network Access Protection (NAP) control access based on?
  • What is the method used in e-mail bombing attacks?
  • Which protocol is commonly used to securely access a remote computer?
  • Which type of attack is designed to trick users into revealing personal information?
  • What connection method allows you to access the company network securely while working remotely?
  • How should you securely manage passwords for internet sites?
  • Which best describes phishing attacks?
  • Can audit logs in the Event Viewer have their size limits adjusted?
  • What is an effective way to enhance network security for a company?
  • Does IPsec add overhead for all network communications?
  • Which method is effective in preventing unauthorized access to sensitive files?
  • What is the standard or basic collection of NTFS permissions?
  • The first line of defense against attacks from the internet is which type of firewall?
  • If your computer is on a domain, can the network administrator reset your password?
  • A user receiving many emails selling prescription medicine is most likely experiencing what type of mail?
  • To limit the programs that run on client computers, which technology should be implemented?
  • What security mode provides the highest security for wireless networks?
  • Can Windows Server Update Services (WSUS) manage updates for Microsoft software?
Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy