Microsoft Windows 98 Risk Assessment & Management 4

Question 1

Which Windows 98 Control Panel applet should be reviewed during a risk assessment to verify that only necessary services and components are installed?

Accepted Answer

Add/Remove Programs

Answer

Add/Remove Programs shows all installed applications and Windows components, allowing a risk assessor to identify and remove unnecessary software that increases attack surface.

Question 2

What risk does the Windows 98 'Briefcase' feature introduce if left unmanaged on a shared workstation?

Accepted Answer

Unauthorized synchronization and potential data leakage of sensitive files to removable media

Answer

Briefcase enables file synchronization with laptops or removable drives, risking uncontrolled transfer of sensitive data outside the organization.

Question 3

In Windows 98, which log file is MOST useful for a post-incident review of system startup failures and driver load errors?

Accepted Answer

BOOTLOG.TXT

Answer

BOOTLOG.TXT records every driver and module load attempt during startup, making it essential for diagnosing boot-time failures in a post-incident review.

Question 4

A risk assessor finds Windows 98 installed on a machine used for online banking. What is the PRIMARY concern?

Accepted Answer

No security updates have been released since 2006, leaving unpatched vulnerabilities exploitable

Answer

Microsoft ended support for Windows 98 in 2006, meaning known vulnerabilities discovered since then will never be patched, exposing financial transactions to exploitation.

Question 5

Which risk mitigation strategy is MOST effective for protecting sensitive data stored on a Windows 98 FAT32 partition?

Accepted Answer

Using third-party encryption software since FAT32 has no native file-level permissions

Answer

FAT32 provides no file-level access control, so third-party encryption is necessary to protect sensitive data from anyone with physical or boot-level access to the machine.

Microsoft Windows 98 Practice Test

Microsoft Windows 98 Practice Test

Microsoft Windows 98 Risk Assessment & Management 4