Browse all practice questions for the Microsoft Technology Associate (MTA) Security Practice Test. Search by topic, open any question and review its full explanation, then test yourself in the practice quiz.

Microsoft Technology Associate (MTA) Security Practice Exam – Prep & Study Guide course image
Can Administrator Passwords Feature ASCII Characters via the ALT Key?Is it true that administrator passwords can contain ASCII characters generated by the ALT key?Can Spoofing MAC Addresses Bypass Network Security?Can an intruder spoof MAC addresses to get around MAC address filtering?Creating a Secondary Administrator Account Can Boost Your Web Server's SecurityTo enhance security on a new web server, which action should you take?Discover how to effectively limit login attempts on company computersWhat should you implement to limit login attempts on company computers?Explore the Consequences of Social Engineering AttacksWhat is a common consequence of a successful social engineering attack?First Steps to Secure Your Server: Why You Should Disable the Guest AccountAs part of hardening a server for a team, what should you do first?How Cleaning Up Unused Registry Entries Impacts Server SecurityDoes the removal of unused registry entries increase the vulnerability of a server?How Physically Securing Servers Prevents TheftWhat does physically securing servers help to prevent?How to Enable Remote Desktop Access on Domain Member ComputersTo allow Remote Desktop through a firewall, which setting should be enabled on a domain member computer?How to Fix a Certificate Error That Shows Your Web Server Is Not TrustedWhat should you do to fix a certificate error indicating your web server is not trusted?How to Prevent Users from Copying Data to Removable MediaTo prevent users from copying data to removable media, what should you do?How to Safeguard Systems Against Buffer Overflow ErrorsWhat can be used to protect systems from buffer overflow errors?How User Account Control (UAC) Enhances Windows SecurityDoes User Account Control (UAC) reduce permissions to that of a standard user unless higher permissions are needed?Learn How to Fortify Your Computer Against Online AttacksWhich action can help make your computer resistant to online attacks?Understand the Impact of Dumpster Diving in CybersecurityWhat does dumpster diving refer to in cybersecurity?Understanding Account Lockout Policies and Their Role in Preventing Brute Force AttacksAccount lockout policies primarily prevent which type of attack?Understanding BitLocker as a Full Disk Encryption Feature in WindowsWhich of the following best describes BitLocker?Understanding Eavesdropping and Its Role in Network SecurityWhich attack listens to network traffic of a computer resource?Understanding File Permissions When Moving Between NTFS ServersWhen you move a file between two NTFS formatted servers, what will happen to the file's permissions?Understanding How a Digitally Signed Email Validates the SenderWhat does a digitally signed e-mail message validate?Understanding how WSUS helps manage updates for Windows systemsWhat does implementing Windows Server Update Services (WSUS) enable a company to manage?Understanding Network Address Translation: How IP Address Management Enhances SecurityWhat does NAT do?Understanding Non-Propagating Malicious Code: The Back Door ExplainedWhat is an example of non-propagating malicious code?Understanding Non-Repudiation in Network SecurityIn the context of network security, what does non-repudiation mean?Understanding Social Engineering: Common Attack Vectors to KnowWhat is a common attack vector used by social engineering hackers? (Choose three)Understanding Special Folder Permissions for File ManagementWhich special folder permission allows for deletion of files?Understanding the Benefits of Active Directory Integrated ZonesWhat is the primary benefit of Active Directory Integrated Zones?Understanding the Best Server Options for Coho Winery's NeedsFor Coho Winery's new web server, which existing server should be repurposed to avoid buying a new one?Understanding the Core of the Microsoft Defense-in-Depth Security ModelWhat overarching defense is found in the Microsoft Defense-in-Depth Security Model?Understanding the Critical Role of NPS in Network Access ProtectionBefore deploying NAP, what must be installed?Understanding the Default Password Length for Windows Server Domain ControllersWhat is the default password length for a Windows server domain controller?Understanding the Essential Purpose of Digital CertificatesWhat is the purpose of a digital certificate?Understanding the First Step in Conducting a Security AuditWhich is the first step when conducting a security audit?Understanding the Importance of a Password History PolicyWhat likely reason did the security firm have for suggesting the implementation of a password history policy?Understanding the Importance of Auditing Account Logon Events in SecurityWhat policy needs to be enabled to log events of account credential validation?Understanding the Importance of Email Virus Scanning in CybersecurityWhat is a primary goal when scanning incoming emails for viruses?Understanding the Importance of Password Complexity RequirementsWhat is the purpose of a password complexity requirement?Understanding the Importance of Password History PoliciesPassword history policies are designed to prevent what?Understanding the Importance of Wireless Intrusion Prevention SystemsWhy would a wireless intrusion prevention system be implemented?Understanding the Key Goals of CybersecurityWhat is the primary goal of cybersecurity?Understanding the Least Privilege Principle in IT SecurityWhich principle is essential in maintaining IT security?Understanding the Main Functions of Bridging on OSI Layer 3What is the main function of bridging on OSI layer 3?Understanding the Risks of Insufficient Security Training for EmployeesWhich of the following is a common consequence of insufficient security training for employees?Understanding the Role of Certificates in SSL Connection AuthenticationIn an SSL connection, what is the primary method of authentication?Understanding the Role of Digital Certificates in Online SecurityWhat is the purpose of a digital certificate?Understanding the Role of Load Balancers in Network Traffic ManagementWhich of the following systems is critical for managing network traffic?Understanding the Security of Biometric DataWhat is the nature of biometric data when it is collected?Understanding the Security Weaknesses of the FAT32 File SystemWhich of the following represents a weakness of the FAT32 file system?Understanding the Threat of Rainbow Table Attacks on Your PasswordsWhich threat is associated with the password 1Vu*cI!8sT?Understanding User-Friendly Password CharacteristicsWhich password characteristic is important for user convenience?Understanding VLANs and Their Role in Network ManagementHow can a VLAN best be described?Understanding What Digital Certificates Don’t Verify About Public KeysWhat does a digital certificate NOT verify about a public key?Understanding Why WEP Security Isn't Strong Enough Even with a 128-Bit KeyIs WEP security strong as long as it has a 128-bit key?Understanding WPA2 PSK and Its Importance for Wireless SecurityWhich wireless security technology requires a long passphrase with characters, letters, numbers, and symbols?What Does a SACL Do in System Security?A system access control list (SACL) allows administrators to do what?What Happens When a DDoS Attack Strikes?What is a common consequence of a DDoS attack?What You Need to Know About Brute Force AttacksWhich password attack attempts every possible alphanumeric combination?What You Need to Know About Worms and Malware ReplicationWhich type of malware is designed to replicate itself and spread to other systems?What You Need to Know About WPA2 Enterprise Security ComponentsWhat is a necessary component for implementing WPA2 Enterprise?What’s the Real Aim of a Spam Filter?What is the primary goal of using a spam filter?Why Complex Passwords Are Essential for Keeping Your Data SafeWhat practice can help in safeguarding sensitive information stored on devices?Why Sending Passwords in Plaintext is a Big No-NoWhat is a common vulnerability in sending passwords over the internet?
More practice questions

These questions are part of the practice quiz. Start practicing

  • When should system administrators use a standard user account?
  • What is one piece of information an administrator can obtain from a honey pot?
  • What does the Service Set Identifier (SSID) represent?
  • What is the overall goal of User Account Control (UAC)?
  • Which three elements does HTTPS encrypt?
  • Does IPsec require network applications to be IPsec aware?
  • In which scenario is a logic bomb an example of a security threat?
  • What is the primary purpose of a honey pot?
  • Which technology is designed to filter communications between a program and the Internet?
  • Basic security questions used to reset a password are susceptible to which form of attack?
  • What does multifactor authentication enhance in a security system?
  • Which kind of backups specifically protect against data loss due to corruption or user error?
  • What does implementing a group policy achieve in a network?
  • Can an administrator account reset a password for a standard user account?
  • Which two features are typically found in an enterprise antivirus program? (Choose two)
  • What security mode provides the highest security for wireless networks?
  • What is a common method to secure sensitive data on a laptop?
  • Which security measure involves regularly updating software to fix vulnerabilities?
  • What is the quickest method to push out an internal certificate to all workstations in an Active Domain?
  • What are two indicators that an email may be a phishing attempt?
  • A user receiving many emails selling prescription medicine is most likely experiencing what type of mail?
  • Which of the following statements about wireless security is false?
  • Which file system does NOT have built-in security features for controlling user access?
  • When creating a new file in a folder with inheritance enabled, what happens to the file?
  • Can intruders find a wireless network if the Service Set Identifier (SSID) is hidden?
  • Which of the following is a common method of securing data during transmission?
  • Which of the following is NOT an example of two-factor authentication?
  • To allow a log file to be opened as an administrator, you should...
  • What is an effective way to enhance network security for a company?
  • What role does RADIUS play in a secure network implementation?
  • What is the primary function of the Windows Firewall?
  • To log access to files in the C:\temp directory, which Advanced Audit Policy should be enabled?
  • Can IPsec encrypt data?
  • What does Network Access Protection (NAP) control access based on?
  • What is a benefit of applying operating system updates to stable client computers?
  • Should senior executives use administrator accounts to access sensitive data?
  • Blocking all automated downloads and pop-ups in a browser primarily protects users from what?
  • Which option allows you to change permissions on a folder?
  • What should Alice never do regarding her password?
  • Are advanced audit policies applied by group policy compatible with basic audit policies?
  • Can smartcards be utilized in biometrics systems?
  • What is the standard or basic collection of NTFS permissions?
  • Which characteristic is NOT recommended for a strong domain password?
  • Which two security settings can be controlled using group policy?
  • What connection method allows you to access the company network securely while working remotely?
  • Which security measure can help defend against unauthorized access?
  • The attack scenario where Chuck modifies messages between Alice and Bob is known as what type of attack?
  • How should you securely manage passwords for internet sites?
  • In the context of security policies, what is the meaning of “brute force attacks”?
  • Creating an MD5 hash for files ensures which aspect of data security?
  • What is a recommended practice to enhance security when using a web application?
  • What type of certificate should a secure public Web server on the Internet have?
  • Can Windows Server Update Services (WSUS) manage updates for Microsoft software?
  • To limit the programs that run on client computers, which technology should be implemented?
  • What is one of the primary benefits of keeping a server updated?
  • What could be blocking the connection to an FTP server from a school lab computer, if the computers can browse the Internet?
  • What happens if a user doesn't meet the requirements for a network password?
  • What characterizes a brute force attack?
  • What is the first step to prevent some users from accessing a subfolder?
  • To prevent third-party content providers from tracking your movements, what feature should you enable?
  • Which method is effective in preventing unauthorized access to sensitive files?
  • What are two possible methods to reset a roommate's forgotten password on a Windows 7 desktop?
  • What is phishing primarily used for?
  • What is the main purpose of Network Access Protection (NAP)?
  • What type of domain controller should be installed by Humongous Insurance in a less secure branch office?
  • What role does encryption play in data security?
  • Which best describes phishing attacks?
  • Can audit logs in the Event Viewer have their size limits adjusted?
  • What is the method used in e-mail bombing attacks?
  • Which measure can help mitigate brute force attacks on passwords?
  • Which type of attack is designed to trick users into revealing personal information?
  • What is the primary characteristic of email spoofing?
  • What technique is used to secure passwords by converting them into unreadable strings?
  • What is the best option for preventing users from seeing each other on a WiFi network?
  • How does the sender policy framework (SPF) help reduce spoofed emails?
  • In ensuring user privacy, what is an essential step to consider?
  • Can tools like Microsoft Security Compliance Manager assist with server hardening?
  • Which tool can be used to monitor network traffic for suspicious activity?
  • What is the primary objective of implementing a firewall in a network?
  • What is the primary objective of using strong passwords?
  • If a server is not responding to a client computer, what should be checked next after confirming network connectivity?
  • What should be your first action if you suspect a user's computer is infected with a virus?
  • What is a benefit of using password expiration?
  • Does IPsec add overhead for all network communications?
  • If a portable computer is stolen, what should you implement to prevent unauthorized users from reading a specific file?
  • What is the purpose of salting in the WPA2 PSK process?
  • Which type of attack seeks to capture data transmitted between a user and a web application?
  • Where is the best location to lock up backup tapes for your servers?
  • Does BitLocker To Go Reader allow for encryption of drives?
  • What is the main purpose of User Account Control (UAC)?
  • Which technology enables access to all of the logged-in user's capabilities on a computer?
  • If your computer is on a domain, can the network administrator reset your password?
  • Cookies can pose a security risk by enabling which of the following?
  • Can UAC notify you when additional permissions are required and ask if you want to continue?
  • What type of access control restricts access based on the identity of users?
  • Which defense specifically targets staff within an organization regarding social engineering threats?
  • How does role separation improve server security?
  • To enable auditing of all local login events, which Advanced Audit Policy needs to be activated?
  • Which of the following is an effective method for preventing unauthorized physical access to a facility?
  • Which of the following is a primary benefit of using DNSSEC?
  • What is the function of a Stateful firewall?
  • What is the main function of a network sniffer?
  • In Internet Explorer 8, what does the InPrivate Browsing feature primarily prevent?
  • If a bank prevents you from using your previous passwords, which concept does this entail?
  • Which protocol is commonly used to securely access a remote computer?
  • What is a common method for password collection?
  • What is Chuck doing if he observes Alice's password sent in plain text?
  • To grant users write access to a file on a network share, what should you do?
  • The first line of defense against attacks from the internet is which type of firewall?
  • What addition could Alice and Bob implement to avoid the "man in the middle" attack?
  • Which technology helps in ensuring computer configurations meet security requirements before accessing a network?
  • What does shredding documents help prevent?
  • Which measure can protect against unauthorized changes to a computer network?
  • Is there a risk of losing access to encrypted files if a password is reset?
  • How can clients verify the legitimacy of a DNS server?
  • What does Active Directory primarily control in an organization?
  • Which is the minimum operating system requirement for creating BitLocker-To-Go media?
  • What is the purpose of the Microsoft Baseline Security Analyzer?
  • What is the role of the Security Accounts Manager?
  • Which security methods require the use of a server? (Choose three)
  • Passwords that contain recognizable words are particularly vulnerable to which type of attack?
  • Which element is NOT essential in preventing phishing attacks?
  • What can Network Access Protection (NAP) enforce regarding client computers?
  • Which provides the highest level of security in a firewall?
  • Which solution should be implemented to secure a domain controller that cannot be physically secured?
  • What does setting a minimum password age restrict?
  • What does DNSSEC primarily prevent regarding DNS queries?
  • What does implementing client isolation mode on a wireless network do?
  • Which of the following accurately describes Windows Firewall?
Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy