Topics to Master

The content of the Microsoft 98-367 exam is based on a wide range of topics. They are subdivided into specific knowledge domains so as to measure the candidates’ specific abilities. The topics covered in the certification test are described in detail below:

• Understanding Security Software (15-20%)

  Here the candidates should demonstrate that they have expertise in client protection. This includes their understanding of protecting against unwanted software installations; Antivirus; User Account Control (UAC); software restriction policies; keeping client software & operating system updated; the principle of least privilege; encrypting offline folders. The objective also measures the competency of the test takers in server protection, including their knowledge of hardening; keeping servers updated; separating services; disabling insecure authentication protocols; securing dynamic Domain Name System (DNS) updates; Read-Only Domain Controllers (RODC). The last area within this topic comes with one’s understanding of such concepts as antivirus, antispam, phishing, spoofing, and pharming; Sender Policy Framework (SPF) records; server vs. client protection; PTR records.

• Understanding Network Security (20-25%)

  This section includes three subsections, such as understanding dedicated firewalls; understanding network isolation; understanding protocol security. Within the first subsection, the learners should demonstrate their understanding of hardware firewall types and their characteristics; Security Compliance Manager; stateful vs. stateless firewall inspection; security baselines; when to utilize a hardware firewall instead of a software one. The second subtopic covers such competencies as knowledge of routing; perimeter networks; honeypot; VPN; network address translation (NAT); IPsec; server & domain isolation. The last subtheme focuses on IPsec; protocol spoofing; network sniffing; tunnelling; denial-of-service (DoS) attacks; DNSsec; common attack techniques.

• Understanding Operating System Security (35-40%)

  This topic requires that the examinees possess a solid understanding of user authentication (including physical & virtual smart cards; biometrics; multifactor authentication; Remote Authentication Dial-In User Service (RADIUS); using Run As to execute administrative tasks) as well as permissions (including file system permissions; registry; sharing permissions; Active Directory; enabling/disabling inheritance; multiple groups with various permissions; procedure when copying or moving files within the same disk or on another disk; fundamental & advanced permissions; taking ownership; inheritance; delegation). The individuals should also have a good grasp of password policies (including password complexity; password history; password length; account lockout; password reset procedures; time between password changes; common attack techniques; enforcing by using Group Policies; protecting domain user account passwords) and audit policies (including enabling auditing; types of auditing; what can be audited; where to save audit information; what to audit for particular purposes; how to secure audit data). Additionally, this domain covers your understanding of encryption. This comes with your familiarity with Encrypting file system (EFS); token devices; virtual private network (VPN); BitLocker (To Go); public key/private key; software-based encryption; TPM; encryption algorithms; MAIL encryption & signing as well as other uses; certificate services; certificate properties; PKI/certificate services infrastructure, among other concepts. Lastly, the section comprises knowledge of malware, including Buffer overflow; spyware; viruses, worms, and polymorphic viruses; ransomware; Trojan horses; backdoors; adware; rootkits; zero day attacks.

• Understanding Security Layers (25-30%)

  Within this subject area, the applicants should have expertise in core security principles, including integrity; availability; confidentiality; threat modelling; impact of threat and risk on principles; social engineering; principle of least privilege; attack surface analysis. They also need to be proficient in physical security. This includes the knowledge of such aspects as site security; removable devices & drives; access control; computer security; mobile device security; keyloggers. Their competency in Internet security, including Browser security settings and secure websites, is also required. Additionally, the test takers should be conversant with wireless security. This requires their understanding of the advantages & disadvantages of particular security types; service set identifiers (SSIDs); keys; MAC filters.

How much Microsoft 98-367: Security Fundamentals Exam Cost

The price of the Microsoft 98-367: Security Fundamentals exam is $127 USD, for more information related to exam price please visit to Microsoft Training website as prices of Microsoft exams fees get varied country wise.

Reference: https://www.microsoft.com/en-us/learning/exam-98-367.aspx

We have attentive service

98-367 exam torrent is available in PDF, software, and online three modes, which allowing you to switch learning materials on paper, on your phone or on your computer, and to study anywhere and anytime. And in any version of 98-367 practice test, the number of downloads and the number of people used at the same time are not limited. You can practice repeatedly for the same set of questions and continue to consolidate important knowledge points. Before you purchase the system, 98-367 practice test provides you with a free trial service, so that customers can fully understand our system before buying; after the online payment is successful, you can receive mail from customer service in 5 to 10 minutes, and then immediately begin to learn 98-367 training prep.

We have an authoritative production team

98-367 practice test is high quality product revised by hundreds of experts according to the changes in the syllabus and the latest developments in theory and practice, it is focused and well-targeted, so that each student can complete the learning of important content in the shortest time. With 98-367 training prep, you only need to spend 20 to 30 hours of practice before you take the exam. In addition, the platform has dedicated experts who update all new data content on a daily basis if we get new information. Therefore, using, you don't need to worry about missing any exam focus.

Although the Microsoft certificate is good, people who can successfully obtain each year are rare, and the difficulty of the 98-367 exam and the pressure of study usually make the students feel discouraged. However, for us, these will no longer be a problem. In the past few years, our team has ushered in hundreds of industry experts, experienced numerous challenges day and night, and finally formed complete learning products--98-367 exam torrent, which is tailor-made for students who want to obtain the certificate. Our platform has the following features:

DOWNLOAD DEMO

We have high quality guarantee

Our website is a very secure and regular platform. We can provide high quality assurance. Firstly, we guarantee the security of the company's website whiling purchasing process of 98-367 exam torrent. The products downloaded and installed do not contain viruses. We also provide professional personnel to remotely guide the installation and use if needed. Secondly, for all customer information about purchasing 98-367 practice test, we will be maintained by specialized personnel and absolutely no information disclosure will occur. To the last but also the most important, our exam materials have the merit of high quality based on the high pass rate as 98% to 100%. The data speak louder than the other words. You should be confident with our 98-367 training prep.

Microsoft 98-367 Exam Syllabus Topics: