Topics of Microsoft 98-367: Security Fundamentals Exam
Candidates must know the exam topics before they start of preparation. because it will really help them in hitting the core. Our Microsoft 98-367: Security Fundamentals Exam exam dumps will include the following topics:
1. Understand security layers (25-30%)
Understand core security principles
- Confidentiality; integrity; availability; how threat and risk impact principles; principle of least privilege; social engineering; attack surface analysis; threat modelling
Understand physical security
- Site security; computer security; removable devices and drives; access control; mobile device security; keyloggers
Understand Internet security
- Browser security settings; secure websites
Understand wireless security
- Advantages and disadvantages of specific security types; keys; service set identifiers (SSIDs); MAC filters
2. Understand operating system security (35-40%)
Understand user authentication
- Multifactor authentication; physical and virtual smart cards; Remote Authentication Dial-In User Service (RADIUS); biometrics; use Run As to perform administrative tasks
Understand permissions
- File system permissions; share permissions; registry; Active Directory; enable or disable inheritance; behavior when moving or copying files within the same disk or on another disk; multiple groups with different permissions; basic permissions and advanced permissions; take ownership; delegation; inheritance
Understand password policies
- Password complexity; account lockout; password length; password history; time between password changes; enforce by using Group Policies; common attack methods; password reset procedures; protect domain user account passwords
Understand audit policies
- Types of auditing; what can be audited; enable auditing; what to audit for specific purposes; where to save audit information; how to secure audit information
Understand encryption
- Encrypting file system (EFS); how EFS-encrypted folders impact moving/copying files; BitLocker (To Go); TPM; software-based encryption; MAIL encryption and signing and other uses; virtual private network (VPN); public key/private key; encryption algorithms; certificate properties; certificate services; PKI/certificate services infrastructure; token devices; lock down devices to run only trusted applications
Understand malware
- Buffer overflow; viruses, polymorphic viruses; worms; Trojan horses; spyware; ransomware; adware; rootkits; backdoors; zero day attacks
3. Understand network security (20-25%)
Understand dedicated firewalls
- Types of hardware firewalls and their characteristics; when to use a hardware firewall instead of a software firewall; stateful versus stateless firewall inspection; Security Compliance Manager; security baselines
Understand network isolation
- Routing; honeypot; perimeter networks; network address translation (NAT); VPN; IPsec; server and domain isolation
Understand protocol security
- Protocol spoofing; IPsec; tunneling; DNSsec; network sniffing; denial-of-service (DoS) attacks; common attack methods
4. Understand security software (15-20%)
Understand client protection
- Antivirus; protect against unwanted software installations; User Account Control (UAC); keep client operating system and software updated; encrypt offline folders, software restriction policies; principle of least privilege
Understand email protection
- Antispam, antivirus, spoofing, phishing, and pharming; client versus server protection; Sender Policy Framework (SPF) records; PTR records
Understand server protection
- Separation of services; hardening; keep server updated; secure dynamic Domain Name System (DNS) updates; disable unsecure authentication protocols; Read-Only Domain Controllers (RODC)
About our valid 98-367 exam questions and answers
Our valid 98-367 exam pdf are written by our professional IT experts and certified trainers, which contains valid 98-367 exam questions and detailed answers. Once you bought our 98-367 exam dumps, you just need to spend your spare time to practice our 98-367 exam questions and remember the answers. Besides, our 98-367 practice exam can help you fit the atmosphere of actual test in advance, which enable you to improve your ability with minimum time spent on 98-367 exam prep and maximum knowledge gained. There are 98-367 free demo for you to download before you buy. Two weeks preparation prior to attend exam is highly recommended.
One-year free update
Once you bought 98-367 exam pdf from our website, you will be allowed to free update your 98-367 exam dumps one-year. We check the updating every day and if there are updating, we will send the latest version of 98-367 exam pdf to your email immediately. You just need to check your email.
Domain Understand security software
The last domain covers nearly 15-20% of exam content and assesses the test-takers' key skills related to protection of clients, email, and servers. Notable importance is given to the sub-topics such as protection against unwanted software installations, keeping the client operating system and software updated, software restriction policies, ways to deal with Antispam, antivirus, spoofing, and phishing, server updates, separation of services, secure dynamic Domain Name System (DNS) updates, Read-Only Domain Controllers (RODC), and others. Applicants should also learn more about Sender Policy Framework (SPF) records and PTR records.
Reference: https://www.microsoft.com/en-us/learning/exam-98-367.aspx
Online test engine
Online test engine is a simulation of 98-367 real exam to help you to get used to the atmosphere of formal test. It can support Windows/Mac/Android/iOS operating system, which means you can do your 98-367 practice exam at any electronic equipment. And it has no limitation of the number of installed computers or other equipment. Online version is perfect for IT workers.
No Help, Full Refund
We guarantee you pass 98-367 real exam 100%. But if you lose the exam with our 98-367 exam dumps, we promise you full refund as long as you send the score report to us. Also you can choose to wait the updating or free change to other dumps if you have other test.
Instant Download: Upon successful payment, Our systems will automatically send the product you have purchased to your mailbox by email. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
Our website is a worldwide certification dumps leader that offer our candidates the most reliable Microsoft exam pdf and valid MTA exam questions which written based on the questions of 98-367 real exam. We are a group of experienced IT experts and certified trainers and created the 98-367 exam dumps to help our customer pass 98-367 real exam with high rate in an effective way. Also we always update our 98-367 exam prep with the change of the actual test to make sure the process of preparation smoothly. So with the help of our 98-367 practice exam, you will pass MTA Security Fundamentals Practice Test real exam easily 100% guaranteed. Choosing Exam4Free, choosing success.
Exam 98-367: Security Fundamentals
This exam validates that a candidate has fundamental security knowledge and skills. It can serve as a stepping stone to the Microsoft Certified Solutions Associate (MCSA) exams. It is recommended that candidates become familiar with the concepts and the technologies described here by taking relevant training courses. Candidates are expected to have some hands-on experience with Windows Server, Windows-based networking, Active Directory, anti-malware products, firewalls, network topologies and devices, and network ports.
Part of the requirements for: MTA: Security Fundamentals
The most effective and smart way to success
Comparing to attending classes in training institution, choosing right study materials is more effective to help you pass 98-367 real exam. Our 98-367 exam dumps are the best materials for your preparation of 98-367 real exam, which save your time and money and help you pass exam with high rate. You can practice 98-367 exam questions at your convenience and review 98-367 exam prep in your spare time.
Microsoft 98-367 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Security Threats and Vulnerabilities | - Malware Types - Social Engineering - Attack Vectors |
| Topic 2: Network Protection | - Encryption Basics - Intrusion Detection Systems - Firewalls |
| Topic 3: Security Layers | - Physical Security - Application Security - Host Security - Network Security |
| Topic 4: Operating System Security | - Authorization and Permissions - User Authentication - Security Policies |







