Domain Understand security layers

This exam domain covers topics such as core security principles including confidentiality, social engineering, attack surface analysis, availability, integrity, and threat modelling. It also gives great importance to understanding physical security. Candidates should learn about physical site security, mobile device security, removable devices and drives, access control, and the use of keyloggers. Internet security, including browser security and wireless security is also part of the syllabus.

Topics to Master

The content of the Microsoft 98-367 exam is based on a wide range of topics. They are subdivided into specific knowledge domains so as to measure the candidates’ specific abilities. The topics covered in the certification test are described in detail below:

• Understanding Operating System Security (35-40%)

  This topic requires that the examinees possess a solid understanding of user authentication (including physical & virtual smart cards; biometrics; multifactor authentication; Remote Authentication Dial-In User Service (RADIUS); using Run As to execute administrative tasks) as well as permissions (including file system permissions; registry; sharing permissions; Active Directory; enabling/disabling inheritance; multiple groups with various permissions; procedure when copying or moving files within the same disk or on another disk; fundamental & advanced permissions; taking ownership; inheritance; delegation). The individuals should also have a good grasp of password policies (including password complexity; password history; password length; account lockout; password reset procedures; time between password changes; common attack techniques; enforcing by using Group Policies; protecting domain user account passwords) and audit policies (including enabling auditing; types of auditing; what can be audited; where to save audit information; what to audit for particular purposes; how to secure audit data). Additionally, this domain covers your understanding of encryption. This comes with your familiarity with Encrypting file system (EFS); token devices; virtual private network (VPN); BitLocker (To Go); public key/private key; software-based encryption; TPM; encryption algorithms; MAIL encryption & signing as well as other uses; certificate services; certificate properties; PKI/certificate services infrastructure, among other concepts. Lastly, the section comprises knowledge of malware, including Buffer overflow; spyware; viruses, worms, and polymorphic viruses; ransomware; Trojan horses; backdoors; adware; rootkits; zero day attacks.

• Understanding Network Security (20-25%)

  This section includes three subsections, such as understanding dedicated firewalls; understanding network isolation; understanding protocol security. Within the first subsection, the learners should demonstrate their understanding of hardware firewall types and their characteristics; Security Compliance Manager; stateful vs. stateless firewall inspection; security baselines; when to utilize a hardware firewall instead of a software one. The second subtopic covers such competencies as knowledge of routing; perimeter networks; honeypot; VPN; network address translation (NAT); IPsec; server & domain isolation. The last subtheme focuses on IPsec; protocol spoofing; network sniffing; tunnelling; denial-of-service (DoS) attacks; DNSsec; common attack techniques.

• Understanding Security Layers (25-30%)

  Within this subject area, the applicants should have expertise in core security principles, including integrity; availability; confidentiality; threat modelling; impact of threat and risk on principles; social engineering; principle of least privilege; attack surface analysis. They also need to be proficient in physical security. This includes the knowledge of such aspects as site security; removable devices & drives; access control; computer security; mobile device security; keyloggers. Their competency in Internet security, including Browser security settings and secure websites, is also required. Additionally, the test takers should be conversant with wireless security. This requires their understanding of the advantages & disadvantages of particular security types; service set identifiers (SSIDs); keys; MAC filters.

• Understanding Security Software (15-20%)

  Here the candidates should demonstrate that they have expertise in client protection. This includes their understanding of protecting against unwanted software installations; Antivirus; User Account Control (UAC); software restriction policies; keeping client software & operating system updated; the principle of least privilege; encrypting offline folders. The objective also measures the competency of the test takers in server protection, including their knowledge of hardening; keeping servers updated; separating services; disabling insecure authentication protocols; securing dynamic Domain Name System (DNS) updates; Read-Only Domain Controllers (RODC). The last area within this topic comes with one’s understanding of such concepts as antivirus, antispam, phishing, spoofing, and pharming; Sender Policy Framework (SPF) records; server vs. client protection; PTR records.

Reference: https://www.microsoft.com/en-us/learning/exam-98-367.aspx

Efficiency in different aspects

To go with the changing neighborhood, we need to improve our efficiency of solving problems, which reflects in many aspect as well as dealing with exams. Our 98-367 practice materials can help you realize it. To those time-sensitive exam candidates, our high-efficient 98-367 actual tests comprised of important news will be best help. Only by practicing them on a regular base, you will see clear progress happened on you. Besides, rather than waiting for the gain of our 98-367 practice materials, you can download them immediately after paying for it, so just begin your journey toward success now.

Exam 98-367: Security Fundamentals

This exam validates that a candidate has fundamental security knowledge and skills. It can serve as a stepping stone to the Microsoft Certified Solutions Associate (MCSA) exams. It is recommended that candidates become familiar with the concepts and the technologies described here by taking relevant training courses. Candidates are expected to have some hands-on experience with Windows Server, Windows-based networking, Active Directory, anti-malware products, firewalls, network topologies and devices, and network ports.

Part of the requirements for: MTA: Security Fundamentals

Download exam skills outline

Considerate Service

We think of providing the best services as our obligation. So we have patient colleagues offering help 24/7 and solve your problems about 98-367 practice materials all the way. We have considerate services as long as you need us. Besides, to fail while trying hard is no dishonor. If you fail the exam with our 98-367 study guide unfortunately, we will switch other versions or give your full money back assuming that you fail this time, and prove it with failure document. Do not underestimate your ability, we will be your strongest backup while you are trying with our 98-367 actual tests.

Whole Package of Services

Our company conducts our business very well rather than unprincipled company which just cuts and pastes content from others and sell them to exam candidates. By virtue of our 98-367 practice materials, many customers get comfortable experiences of Whole Package of Services and of course passing the 98-367 study guide successfully. As to some exam candidate are desperately eager for useful 98-367 actual tests, our products help you and other customer who are having an acute shortage of efficient practice materials.

Having a good command of professional knowledge will do a great help to your life. With the advent of knowledge times, we all need some professional certificates such as Microsoft to prove ourselves in different working or learning condition. So making right decision of choosing useful practice materials is of vital importance. Here we would like to introduce our 98-367 practice materials for you with our heartfelt sincerity. With passing rate more than 98 percent from exam candidates who chose our 98-367 study guide, we have full confidence that your 98-367 actual test will be a piece of cake by them.

DOWNLOAD DEMO

Professional Team

To make sure your situation of passing the certificate efficiently, our 98-367 practice materials are compiled by first-rank experts. So the proficiency of our team is unquestionable. They help you review and stay on track without wasting your precious time on useless things. They handpicked what the 98-367 study guide usually tested in exam recent years and devoted their knowledge accumulated into these 98-367 actual tests. We are on the same team, and it is our common wish to help your realize it. So good luck!

Accessible content

To assimilate those useful knowledge better, many customers eager to have some kinds of practice materials worth practicing. All content is clear and easily understood in our 98-367 practice materials. They are accessible with reasonable prices and various versions for your option. All content are in compliance with regulations of the exam. As long as you are determined to succeed, our 98-367 study guide will be your best reliance