Microsoft Windows 98 Risk Assessment & Management 5

Question 1

Which action BEST reduces the risk of data loss from sudden power failures on a Windows 98 system?

Accepted Answer

Implementing an Uninterruptible Power Supply (UPS) and enabling UPS monitoring in Windows 98

Answer

A UPS provides battery backup during power outages, and Windows 98's built-in UPS support allows graceful shutdown before battery depletion, preventing file system corruption.

Question 2

A risk assessment reveals Windows 98 is running Internet Explorer 5.0. What is the MOST significant risk this represents?

Accepted Answer

Multiple critical unpatched vulnerabilities in an end-of-life browser version exploitable via malicious websites

Answer

IE 5.0 contains numerous publicly known, unpatched security vulnerabilities that attackers can exploit simply by luring users to malicious web pages.

Question 3

In risk management for Windows 98 environments, what does the principle of 'defense in depth' suggest about relying solely on antivirus software?

Accepted Answer

Multiple overlapping security controls should be used since antivirus is one layer, not a complete solution

Answer

Defense in depth requires layering multiple security controls — antivirus, strong passwords, patching, and limited sharing — because any single control can fail or be bypassed.

Question 4

When documenting risks in a Windows 98 environment, how is 'risk likelihood' BEST determined?

Accepted Answer

By evaluating the exposure level, known exploit availability, and historical incident frequency for each identified vulnerability

Answer

Likelihood is assessed by combining how exposed the system is, whether public exploits exist for known vulnerabilities, and how often similar systems have been attacked.

Question 5

Which Windows 98 feature, if misconfigured, could allow remote attackers to execute code via crafted network packets?

Accepted Answer

Server Message Block (SMB) through File and Printer Sharing

Answer

SMB through File and Printer Sharing has historically been exploited by network worms and attackers to execute code remotely on vulnerable Windows systems.

Microsoft Windows 98 Practice Test

Microsoft Windows 98 Practice Test

Microsoft Windows 98 Risk Assessment & Management 5