Microsoft Windows 98 Risk Assessment & Management 3 — Questions and Answers
Question 1: Which Windows 98 network configuration poses the HIGHEST security risk when connecting to the internet?
- Using a static IP address
- Enabling NetBIOS over TCP/IP with File Sharing on a public connection (Correct answer)
- Setting a workgroup name
- Using DHCP for IP assignment
Correct answer: Enabling NetBIOS over TCP/IP with File Sharing on a public connection
NetBIOS over TCP/IP combined with File Sharing exposes internal network resources directly to internet-based attackers scanning for open shares.
Question 2: In risk management terms, what does creating a Windows 98 Emergency Startup Disk (ESD) primarily address?
- Confidentiality risk
- Availability risk from system boot failure (Correct answer)
- Integrity risk of corrupted files
- Network security risk
Correct answer: Availability risk from system boot failure
An Emergency Startup Disk mitigates availability risk by providing a bootable recovery tool when the operating system fails to start normally.
Question 3: A Windows 98 machine shares a broadband connection without any firewall. Which risk category does this BEST represent?
- Physical risk
- Operational risk from unprotected inbound network traffic (Correct answer)
- Compliance risk
- Financial risk
Correct answer: Operational risk from unprotected inbound network traffic
Without a firewall, all inbound internet traffic reaches the host directly, exposing it to port scans, exploits, and unauthorized connection attempts.
Question 4: When assessing risk in Windows 98, why is the Registry considered a high-value target for malware?
- It stores temporary internet files
- It controls startup programs, system settings, and file associations that malware can hijack (Correct answer)
- It contains user email data
- It manages disk partitions
Correct answer: It controls startup programs, system settings, and file associations that malware can hijack
The Registry governs startup entries, file type handlers, and core system behavior, making it a prime target for persistence mechanisms and system hijacking.
Question 5: Which Windows 98 startup key combination can be used during risk assessment to boot into Safe Mode and isolate problematic drivers or software?
- F2
- F8 (Correct answer)
- F10
- F12
Correct answer: F8
Pressing F8 during Windows 98 startup displays the Startup Menu, allowing the user to select Safe Mode to load only essential drivers for diagnostic purposes.
Question 6: From a risk perspective, what is the danger of running Windows 98 with the default 'share-level' network security model?
- It encrypts all network traffic, slowing performance
- Single passwords protect entire shares rather than individual user accounts, weakening access control (Correct answer)
- It prevents internet access
- It disables dial-up networking
Correct answer: Single passwords protect entire shares rather than individual user accounts, weakening access control
Share-level security uses one password per share with no per-user tracking, making it easy for passwords to be shared widely and access to go unmonitored.
Question 7: A risk assessment identifies that Windows 98 auto-runs programs from inserted CDs. What risk does AutoRun present?
- Disk fragmentation
- Automatic execution of malicious code from untrusted removable media (Correct answer)
- Increased power consumption
- Slower CD read speeds
Correct answer: Automatic execution of malicious code from untrusted removable media
AutoRun can silently launch executable code from a CD without user approval, allowing malicious discs to install malware immediately upon insertion.
Microsoft Windows 98 Risk Assessment & Management 3
Which Windows 98 network configuration poses the HIGHEST security risk when connecting to the internet?