The latest SCP certification SC0-471 exam practice questions and answers

The ITCertKing Free SCP SC0-471 sample questions, allow you to enjoy the process of buying risk-free. This is a version of the exercises, so you can see the quality of the questions, and the value before you decide to buy. We are confident that ITCertKing the SCP SC0-471 sample enough you satisfied with the product. In order to ensure your rights and interests，ITCertKing commitment examination by refund. Our aim is not just to make you pass the exam, we also hope you can become a true IT Certified Professional. Help you get consistent with your level of technology and technical posts, and you can relaxed into the IT white-collar workers to get high salary.

If you have decided to participate in the SCP SC0-471 exam, ITCertKing is here. We can help you achieve your goals. We know that you need to pass your SCP SC0-471 exam, we promise that provide high quality exam materials for you, Which can help you through SCP SC0-471 exam.

SCP SC0-471 exam is a very hot exam. Although it is difficult to pass the exam, the identification of entry point will make you easy to pass your exam. ITCertKing practice test dumps are your best choice and hit rate is up to 100%. And our exam dumps can help you solve any questions of SC0-471 exam. As long as you carefully study the questions in the dumps, all problems can be solved. Purchasing ITCertKing certification training dumps, we provide you with free updates for a year. Within a year, as long as you want to update the dumps you have, you can get the latest version. Try it and see for yourself.

Exam Code: SC0-471
Exam Name: SCP (Strategic Infrastructure Security)
One year free update, No help, Full refund!
Total Q&A: 180 Questions and Answers
Last Update: 2014-02-17

ITCertKing have a professional IT team to do research for practice questions and answers of the SCP SC0-471 exam certification exam. They provide a very effective training tools and online services for your. If you want to buy ITCertKing products, ITCertKing will provide you with the latest, the best quality and very detailed training materials as well as a very accurate exam practice questions and answers to be fully prepared for you to participate in the SCP certification SC0-471 exam. Safely use the questions provided by ITCertKing's products. Selecting the ITCertKing is equal to be 100% passing the exam.

SC0-471 Free Demo Download: http://www.itcertking.com/SC0-471_exam.html

NO.1 You are working with some new RPM files on your Linux system. You know there are several options
when dealing with RPM files. Which of the following answers lists proper RPM commands, with the
correct description of the command?
A. rpm -q <package name> This command performs software verification.
B. rpm -e <package name> This command removes the software.
C. rpm -v <package name> This command performs software verification.
D. rpm -r <package name> This command removes the software.
E. rpm -i <package name> This command installs the software.
F. rpm -in <package name> This command installs the software.
Answer: ABE

SCP test questions   SC0-471   SC0-471   SC0-471 exam prep

NO.2 Recently, you have seen an increase in intrusion attempts and in network traffic. You decide to use
Snort to run a packet capture and analyze the traffic that is present. Looking at the example, what type of
traffic did Snort capture in this log file?
A. Windows 2000 Ping Request
B. Windows NT 4.0 Ping Request
C. Linux Ping Request
D. Linux Ping Response
E. Windows NT 4.0 Ping Response
Answer: B

SCP   SC0-471   SC0-471   SC0-471

NO.3 You have just become the senior security professional in your office. After you have taken a complete
inventory of the network and resources, you begin to work on planning for a successful security
implementation in the network. You are aware of the many tools provided for securing Windows 2003
machines in your network. What is the function of Secedit.exe?
A. This tool is used to set the NTFS security permissions on objects in the domain.
B. This tool is used to create an initial security database for the domain.
C. This tool is used to analyze a large number of computers in a domain-based infrastructure.
D. This tool provides an analysis of the local system NTFS security.
E. This tool provides a single point of management where security options can be applied to a local
computer or can be imported to a GPO.
Answer: C

SCP exam simulations   SC0-471   SC0-471

NO.4 You are working on the authentication systems in your network, and are concerned with your legacy
systems. In Windows NT 4.0, before Service Pack 4 (SP4), there were only two supported methods of
authentication. What were those two methods?
A. NetBIOS
B. LM
C. NTLM
D. NTLMv2
E. Kerberos
Answer: BC

SCP   SC0-471   SC0-471   SC0-471

NO.5 In the process of public key cryptography, which of the following is true?
A. Only the public key is used to encrypt and decrypt
B. Only the private key can encrypt and only the public key can decrypt
C. Only the public key can encrypt and only the private key can decrypt
D. The private key is used to encrypt and decrypt
E. If the public key encrypts, then only the private key can decrypt
Answer: E

SCP   SC0-471 test answers   SC0-471

NO.6 To maintain the security of your network you routinely run several checks of the network and
computers. Often you use the built-in tools, such as netstat. If you run the following command:
netstat -e
which of the following will be the result?
A. Displays all connections and listening ports
B. Displays Ethernet statistics
C. Displays addresses and port numbers in numerical form
D. Shows connections for the protocol specified
E. Displays per-protocol statistics
Answer: B

SCP   SC0-471   SC0-471 exam prep   SC0-471

NO.7 What type of cipher is used by an algorithm that encrypts data one bit at a time?
A. 64-bit encryption Cipher
B. Block Cipher
C. Stream Cipher
D. Diffuse Cipher
E. Split Cipher
Answer: C

SCP   SC0-471   SC0-471   SC0-471 exam simulations

NO.8 On Monday, during a routine check of a users Windows workstation, you find the following program,
called regedit.bat on the users local hard drive:
Net localgroup administrators local /all
Start regedit.exe
Exit
What is this program capable of doing on this computer?
A. Nothing, the first line is coded wrong.
B. It will add the administrators to the local group
C. It will add the local user to all local groups
D. It will add the administrators to all local groups
E. It will add the local user to the administrators group
Answer: E

SCP   SC0-471 exam simulations   SC0-471 exam dumps   SC0-471 test answers   SC0-471

NO.9 You are discussing the design and infrastructure of the Internet with several colleagues when a
disagreement begins over the actual function of the NAP in the Internets design. What is the function of a
NAP in the physical structure of the Internet?
A. The NAP provides for a layered connection system of ISPs connecting to the backbone.
B. The NAP provides the actual connection point between a local user and the Internet.
C. The NAP provides the physical network with communication channels for the Internet and voice/data
applications.
D. The NAP provides a national interconnection of systems, called peering centers, to the NSPs.
E. The NAP provides for a connection point between an ISP and the backbone of the Internet.
Answer: E

SCP exam   SC0-471 certification   SC0-471

NO.10 You are aware of the significance and security risk that Social Engineering plays on your company. Of
the following Scenarios, select those that, just as described, represent potentially dangerous Social
Engineering:
A. A writer from a local college newspapers calls and speaks to a network administrator. On the call the
writer requests an interview about the current trends in technology and offers to invite the administrator to
speak at a seminar.
B. An anonymous caller calls and wishes to speak with the receptionist. On the call the caller asks the
receptionist the normal business hours that the organization is open to the public.
C. An anonymous caller calls and wishes to speak with the purchaser of IT hardware and software. On
the call the caller lists several new products that the purchaser may be interested in evaluating. The caller
asks for a time to come and visit to demonstrate the new products.
D. An email, sent by the Vice President of Sales and Marketing, is received by the Help Desk asking to
reset the password of the VP of Sales and Marketing.
E. An email is received by the Chief Security Officer (CSO) about a possible upgrade coming from the ISP
to a different brand of router. The CSO is asked for the current network's configuration data and the
emailer discusses the method, plan, and expected dates for the rollover to the new equipment.
Answer: DE

SCP certification   SC0-471   SC0-471 certification   SC0-471

NO.11 If you encrypt or decrypt files and folders located on a remote computer that has been enabled for
remote encryption; the data that is transmitted over the network by this process is not encrypted. In order
to keep data encrypted as it is transmitted over the network, which of the following must you do?
A. You must implement EFS.
B. You must implement B2 security for Windows.
C. You must use IPSec.
D. You must use a recovery agent.
E. You must transmit the entire folder, not individual files.
Answer: C

SCP   SC0-471 dumps   SC0-471 answers real questions   SC0-471 answers real questions   SC0-471 answers real questions

NO.12 Which one of the following is an incorrect mod equation?
A. 9 mod 3 = 0
B. 40 mod 10 = 0
C. 40 mod 9 = 4
D. (6-1) mod 3 = 0
E. (2+4) mod 5 = 1
Answer: D

SCP study guide   SC0-471   SC0-471 certification training   SC0-471   SC0-471

NO.13 You have become the lead security professional for a mid-sized organization. You are currently
studying DNS issues, and configuration options. You come across the concepts of DNS Spoofing, and
investigate more. What is DNS Spoofing?
A. DNS Spoofing is when the DNS client submits a false DNS request to the DNS server, and the DNS
server responds with correct data.
B. DNS Spoofing is the DNS client submits a DNS request to the DNS server using a bogus IP address,
and the DNS server responds to the incorrect host.
C. DNS Spoofing is when a DNS Server responds to an unauthorized DNS client, providing that client
with name resolution.
D. DNS Spoofing is when a DNS client is forced to make a DNS query to an imposter DNS server, which
send the client to an imposter resource.
E. DNS spoofing is when a DNS server provides name resolution to clients that are located in a different
IP subnet than the server itself.
Answer: D

SCP study guide   SC0-471   SC0-471 demo   SC0-471   SC0-471 test questions

NO.14 Attackers have the ability to use programs that are able to reveal local passwords by placing some
kind of a pointer/cursor over the asterisks in a program's password field. The reason that such tools can
uncover passwords in some Operating Systems is because:
A. the passwords are simply masked with asterisks
B. the etc/passwd file is on a FAT32 partition
C. the passwords are decrypted on screen
D. the password text is stored in ASCII format
E. the etc/passwd file is on a FAT16 partition
Answer: A

SCP study guide   SC0-471   SC0-471 study guide   SC0-471 certification training   SC0-471

NO.15 Which of the following are symmetric encryption algorithms?
A. MD5
B. RSA
C. Diffie-Hellman
D. 3DES
E. AES
Answer: DE

SCP   SC0-471   SC0-471   SC0-471

NO.16 You are configuring the lines that control access to exported objects on your server running NFS. If
you have a directory called /Tech and you wish to export this directory to network 192.168.20.0/24,
allowing root access, and the permissions of read and write, which of the following lines will accomplish
this?
A. (RW) no_root_squash /Tech 192.168.20.0/24
B. /Tech 192.168.20.0/24 (rw) no_root_squash
C. (RW) no_root_squash 192.168.20.0/24 /Tech
D. (RW)no_root_squash:/Tech 192.168.20.0/24
E. /Tech 192.168.20.0/24(rw) no_root_squash
Answer: E

SCP   SC0-471 certification   SC0-471   SC0-471   SC0-471 dumps

NO.17 What is the name of the informational page that is relevant to a particular command in Linux?
A. Readme Page
B. Lnx_nfo Page
C. Man Page
D. X_Win Page
E. Cmd_Doc Page
Answer: C

SCP certification training   SC0-471 exam prep   SC0-471   SC0-471 certification training

NO.18 Recently, you have seen an increase in intrusion attempts and in network traffic. You decide to use
Snort to run a packet capture and analyze the traffic that is present. Looking at the example, what type of
traffic did Snort capture in this log file?
A. NetBus Scan
B. Trojan Scan
C. Ping Sweep
D. Port Scan
E. Ping Sweep
Answer: D

SCP exam prep   SC0-471   SC0-471

NO.19 As per the guidelines in the ISO Security Policy standard, what is the purpose of the section on
Business Continuity Planning?
A. The objectives of this section are to maintain appropriate protection of corporate assets and to ensure
that information assets receive an appropriate level of protection.
B. The objectives of this section are to provide management direction and support for information security.
C. The objectives of this section are to counteract interruptions to business activities and to critical
business processes from the effects of major failures or disasters.
D. The objectives of this section are to avoid breaches of any criminal or civil law, statutory, regulatory or
contractual obligations and of any security requirements, and to ensure compliance of systems with
organizational security policies and standards.
E. The objectives of this section are to control access to information, to prevent unauthorized access to
information systems, to ensure the protection of networked services, and to prevent unauthorized
computer access.
Answer: C

SCP practice test   SC0-471 exam simulations   SC0-471

NO.20 During a one week investigation into the security of your network you work on identifying the
information that is leaked to the Internet, either directly or indirectly. One thing you decide to evaluate is
the information stored in the Whois lookup of your organizational website. Of the following, what pieces of
information can be identified via this method?
A. Registrar
B. Mailing Address
C. Contact Name
D. Record Update
E. Network Addresses (Private)
Answer: ABCD

SCP   SC0-471   SC0-471

NO.21 What encryption algorithm was selected to replace DES?
A. RC5
B. IDEA
C. AES
D. Blowfish
E. RSA
Answer: C

SCP   SC0-471   SC0-471   SC0-471

NO.22 When using the 3DES encryption ( C = EK1[DK2[EK1[P]]] ) , what is the function of C?
A. C is the text before encryption
B. C is the first encryption key
C. C is the second encryption key
D. C is the decryption key
E. C is the text after encryption
Answer: E

SCP answers real questions   SC0-471   SC0-471 demo   SC0-471   SC0-471 exam dumps   SC0-471 practice test

NO.23 As per the guidelines in the ISO Security Policy standard, what is the purpose of the section on
Physical and Environmental Security?
A. The objectives of this section are to avoid breaches of any criminal or civil law, statutory, regulatory or
contractual obligations and of any security requirements, and to ensure compliance of systems with
organizational security policies and standards.
B. The objectives of this section are to prevent unauthorized access, damage and interference to
business premises and information; to prevent loss, damage or compromise of assets and interruption to
business activities; to prevent compromise or theft of information and information processing facilities.
C. The objectives of this section are to provide management direction and support for information
security.
D. The objectives of this section are to maintain appropriate protection of corporate assets and to ensure
that information assets receive an appropriate level of protection.
E. The objectives of this section are to control access to information, to prevent unauthorized access to
information systems, to ensure the protection of networked services, and to prevent unauthorized
computer access.
Answer: B

SCP exam   SC0-471   SC0-471 certification training

NO.24 During the review of the security logs you notice some unusual traffic. It seems that a user has
connected to your Web site ten times in the last week, and each time has visited every single page on the
site. You are concerned this may be leading up to some sort of attack. What is this user most likely getting
ready to do?
A. Mirror the entire web site.
B. Download entire DNS entries.
C. Scan all ports on a web server.
D. Perform a Distributed Denial of Service attack through the Web server.
E. Allow users to log on to the Internet without an ISP.
Answer: A

SCP   SC0-471   SC0-471 pdf   SC0-471

NO.25 What is a problem with symmetric key cryptography?
A. It is slower than asymmetric key cryptography
B. Secure distribution of the public key
C. There is a lack of encryption protocols that can use symmetric key cryptography
D. Secure distribution of a secret key
E. Symmetric key cryptography is reserved for the NSA
Answer: D

SCP   SC0-471 original questions   SC0-471   SC0-471

NO.26 In order for your newly written security policy to have any weight, it must be implemented. Which of
the following are the three components of a successful Security Policy Implementation in an
organization?
A. Policy Monitoring
B. Policy Design
C. Policy Committee
D. Policy Enforcement
E. Policy Documentation
Answer: ABD

SCP exam prep   SC0-471 braindump   SC0-471   SC0-471

NO.27 You have just downloaded a new file, called scnpfile.tar.gz. You are going to verify the file prior to
un-archiving the file. Which command do you need to type to un-compress the file, prior to un-archiving?
A. tar xvf scnpfile.tar.gz
B. tar -zxvf scnpfile.tar.gz
C. gunzip scnpfile.tar.gz
D. gunzip -xvf scnpfile.tar.gz
E. gunzip -zxvf scnpfile.tar.gz
Answer: C

SCP exam prep   SC0-471   SC0-471   SC0-471

NO.28 If you wish to change the permissions of a parent directory in your Linux system, and want the
permissions to be changed on the files and subdirectories in the parent directory to be the same, what
switch must you use?
A. -G
B. -R
C. -P
D. -S
E. -F
Answer: B

SCP braindump   SC0-471   SC0-471 questions   SC0-471

NO.29 To increase the security of your network and systems, it has been decided that EFS will be
implemented in the appropriate situations. Two users are working on a common file, and often email this
file back and forth between each other. Is this a situation where the use of EFS will create effective
security, and why (or why not)?
A. No, the security will remain the same since both users will share the same key for encryption.
B. Yes, since the file will be using two keys for encryption the security will increase.
C. No, the security will remain the same since both users will share the same key for decryption.
D. Yes, since the file will be using two keys for decryption the security will increase.
E. No, EFS cannot be used for files that are shared between users.
Answer: E

SCP pdf   SC0-471 braindump   SC0-471 questions   SC0-471 exam   SC0-471   SC0-471

NO.30 Often times attackers will run scans against the network to identify different network and operating
systems, and resources that are available. If an attacker runs scans on the network, and you are logging
the connections, which of the following represent the legitimate combination of packets that will be sent
between the attacker and target?
A. Attacker PSH-FIN Scan, Target RST-FIN Response
B. Attacker ACK Scan, Target NULL Response
C. Attacker NULL Scan, Target RST Response
D. Attacker SYN Scan, Target NULL Response
E. Attacker FIN Scan, Target RST Response
Answer: CE

SCP   SC0-471 original questions   SC0-471   SC0-471 test answers

ITCertKing offer the latest HIO-201 exam material and high-quality MB5-858 pdf questions & answers. Our HP2-E56 VCE testing engine and HP2-B105 study guide can help you pass the real exam. High-quality 70-483 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/SC0-471_exam.html

SCP certification SC0-402 exam training programs

It is inconceivable that ITCertKing SCP SC0-402 test dumps have 100% hit rate. The dumps cover all questions you will encounter in the actual exam. So, you just master the questions and answers in the dumps and it is easy to pass SC0-402 test. As one of the most important exam in SCP certification exam, the certificate of SCP SC0-402 will give you benefits. And you must not miss the opportunity to pass SC0-402 test successfully. If you fail in the exam, ITCertKing promises to give you FULL REFUND of your purchasing fees. In order to successfully pass the exam, hurry up to visit ITCertKing.com to know more details.

As the professional provider of exam related materials in IT certification test, ITCertKing has been devoted to provide all candidates with the most excellent questions and answers and has helped countless people pass the exam. ITCertKing SCP SC0-402 study guide can make you gain confidence and help you take the test with ease. You can pass SC0-402 certification test on a moment's notice by ITCertKing exam dumps. Isn't it amazing? But it is true. As long as you use our products, ITCertKing will let you see a miracle.

ITCertKing has special training tools for SCP certification SC0-402 exam, which can make you do not need to spend a lot of time and money but can get a lot of knowledge of IT technology to enhance your skills in a short time. And soon you will be able to prove your expertise knowledge and technology in IT industry. ITCertKing's training courses for SCP certification SC0-402 exam is developed by the study of ITCertKing experts team to use their knowledge and experience.

When you click into ITCertKing's site, you will see so many people daily enter the website. You can not help but be surprised. In fact, this is normal. ITCertKing is provide different training materials for alot of candidates. They are using our training materials tto pass the exam. This shows that our SCP SC0-402 exam training materials can really play a role. If you want to buy, then do not miss ITCertKing website, you will be very satisfied.

ITCertKing provide training tools included SCP certification SC0-402 exam study materials and simulation training questions and more importantly, we will provide you practice questions and answers which are very close with real certification exam. Selecting ITCertKing can guarantee that you can in a short period of time to learn and to strengthen the professional knowledge of IT and pass SCP certification SC0-402 exam with high score.

It's better to hand-lit own light than look up to someone else's glory. ITCertKing SCP SC0-402 exam training materials will be the first step of your achievements. With it, you will be pass the SCP SC0-402 exam certification which is considered difficult by a lot of people. With this certification, you can light up your heart light in your life. Start your new journey, and have a successful life.

ITCertKing's SCP SC0-402 exam training materials' simulation is particularly high. You can encounter the same questions in the real real exam. This only shows that the ability of our IT elite team is really high. Now many ambitious IT staff to make their own configuration files compatible with the market demand, to realize their ideals through these hot IT exam certification. Achieved excellent results in the SCP SC0-402 exam. With the SCP SC0-402 exam training of ITCertKing, the door of the dream will open for you.

Exam Code: SC0-402
Exam Name: SCP (Network Defense and Countermeasures (NDC))
One year free update, No help, Full refund!
Total Q&A: 275 Questions and Answers
Last Update: 2014-01-05

SC0-402 Free Demo Download: http://www.itcertking.com/SC0-402_exam.html

NO.1 You are the firewall administrator at your company and the network administrators have decided to
implement a PPTP VPN solution, which of these ports would you need to allow through the firewall
to allow these VPN sessions into your network?
A. 1723
B. 2317
C. 1273
D. 1372
E. 7132
Answer: A

SCP   SC0-402 test answers   SC0-402 certification training   SC0-402 test

NO.2 You are the firewall administrator at your company and the network administrators have
decided to implement a VPN solution that will use L2TP. Which port or ports would you
need to allow through the firewall to allow the L2TP traffic to reach the VPN server
inside your network from a remote client?
A. TCP 1723
B. UDP 47
C. UDP 1701
D. TCP 443
E. UDP 500
Answer: C

SCP   SC0-402   SC0-402 certification training   SC0-402

NO.3 Which of the following best describes the Repair Model?
A. The model makes use of preventive measures and regular service as well as updates such as Service
Packs, maintenance updates,
and patches. Preventive measures can also improve the chances of the repair model working better than
if
the system had no
preventive measures ever taken.
B. The repair model is the transference of risk to an insurance company that covers the costs of replacing
the critical assets within
your network. The drawbacks are increase in premiums after making a claim, high premiums anyway,
down time while the
insurance company is processing the claim, and claim may not pay what replacement costs are today.
C. Assets will typically cost much more than the original capital outlay that it took to purchase it long ago.
Repair costs can be very
high and a decision to exercise this model should not be made in haste. There are also depreciation
issues
to deal with as well. In
any case, this model should be the last resort because of cost and may be the most time consuming.
D. The repair model makes use of the acknowledged skills and abilities of the existing personnel.
Knowing that assets have very
specific dollar values assigned to them, the choice on how to manage the asset is based on the
experience
of the personnel.
E. Before incurring the cost for repair of an inoperative asset, check for maintenance agreements that
may
include the cost of repair
or the actual repair itself. Nevertheless, the repair model should focus on the restoration of the downed
asset to its working status
within the network infrastructure. Keep in mind that after hardware costs, costs for the reloading or
replacement of software can
be a large cost factor as well.
Answer: E

SCP practice test   SC0-402 original questions   SC0-402 exam   SC0-402 answers real questions   SC0-402 practice test

NO.4 During a discussion of asset classification and protection with a coworker, you realize that your
coworker does not know the basic concepts of asset protection. You are asked to describe the types of
asset protection. Which of the following describes the concept of an infeasible protection of an asset?
A. The cost to protect the asset is greater than the cost of recovery of the asset
B. The cost to replace the asset is less than the cost of recovery of the asset
C. the cost to protect the asset is infeasible to determine
D. The cost to replace the asset is greater than the cost of recovery of the asset
E. The cost to protect the asset is less than the cost of recovery of the asset
Answer: A

SCP exam simulations   SC0-402   SC0-402 dumps

NO.5 Your company has decided to allow certain people to work from home. The work that
they do, does not require that they be in the office for anything more than meetings. In
addition, they already have high-speed DSL connections at their homes for personal use.
You have been given the task of figuring out how to get your coworkers to connect to
your company's network securely and reliably. What technology can you use to solve
your problem most effectively?
A. Dedicated Leased Lines (ISDN or T1)
B. Dial-Up via PSTN lines.
C. VPN
D. IPChains
E. IDS
Answer: C

SCP   SC0-402   SC0-402 test questions   SC0-402 braindump

NO.6 You are considering adding layers to your existing authentication system. Reading through some of
the vendor literature on logon solutions, it frequently mentions two and three factor authentication.
Your assistant asks you to describe the difference between the two. Select the options that correctly
describe two-factor and three-factor authentication:
A. Two-factor authentication is the process providing something you have along with something you
know.
B. Two-factor authentication is the process of providing two forms of authentication, such as a username
and a password.
C. Two-factor authentication is the process of authenticating twice during the login sequence to verify user
identity.
D. Three-factor authentication is the process of providing something you have along with something you
know and something you are.
E. Three-factor authentication is the process of providing three forms of authentication, such as
username,
password, and sitting at
the physical machine to login.
F. Three-factor authentication is the process of authenticating three times during the login sequence to
verify user identity.
Answer: AD

SCP exam simulations   SC0-402   SC0-402   SC0-402 questions   SC0-402   SC0-402

NO.7 You were recently hired as the security administrator of a small business. You are
reviewing the current state of security in the network and find that the current logging
system must be immediately modified. As the system is currently configured, auditing
has no practical value. Which of the following are the reasons that the current auditing
has little value?
A. The logs go unchecked.
B. The logs are automatically deleted after three months.
C. The logs are deleted using FIFO and capped at 500Kb.
D. The only auditing is successful file access events.
E. The logs are deleted using FIFO and capped at 5000Kb.
Answer: AD

SCP dumps   SC0-402 dumps   SC0-402

NO.8 You have been hired at a large company to manage network. Prior to your arrival, there
was no one dedicated to security, so you are starting at the beginning. You hold a
meeting and are discussing the main functions and features of network security. One of
your assistants asks what the function of Integrity in network security is. Which of the
following best describes Integrity?
A. The security must limit user privileges to minimize the risk of unauthorized access to sensitive
information and areas of the
network that only authorized users should only be allowed to access.
B. Integrity verifies users to be who they say they are. In data communications, the integrity of the sender
is necessary to verify that
the data came from the right source. The receiver is authenticated as well to verify that the data is going
to
the right destination.
C. Data communications as well as emails need to be protected for privacy and Integrity. Integrity ensures
the privacy of data on the
network system.
D. Integrity is a security principle that ensures the continuous accuracy of data and information stored
within network systems. Data
must be kept from unauthorized modification, forgery, or any other form of corruption either from
malicious threats or corruption
that is accidental in nature. Upon receiving the email or data communication, integrity must be verified to
ensure that the message
has not been altered, modified, or added to or subtracted from in transit by unauthorized users.
E. Security must be established to prevent parties in a data transaction from denying their participation
after the business transaction
has occurred. This establishes integrity for the transaction itself for all parties involved in the transaction.
Answer: D

SCP   SC0-402   SC0-402   SC0-402 test   SC0-402 study guide

NO.9 Your company has decided to allow certain people to work from home. The work that they do does
not require that they be in the office for anything more than meetings and they already have
personal high-speed DSL connections at their homes. You have been given the task of figuring out
how to get your coworkers to connect to your company's network securely and reliably. What
technology can you use to solve your problem most effectively?
A. Dedicated Leased Lines (ISDN or T1)
B. Dial-Up via PSTN lines.
C. VPN
D. Firewall
E. IDS
Answer: C

SCP exam simulations   SC0-402   SC0-402 test questions

NO.10 Which of the following best describes the Total Replacement Model?
A. The total replacement model makes use of the acknowledged skills and abilities of the existing
personnel. Knowing that assets
have very specific dollar values assigned to them, the choice on how to manage the asset is based on the
experience of the
personnel.
B. Before incurring the cost for replacing of an inoperative asset, check for maintenance agreements that
may include the cost of
repair or the actual repair itself. Nevertheless, the total replacement model should focus on the repairing
of
the downed asset to its
working status within the network infrastructure. Keep in mind that after hardware costs, costs for the
reloading or replacement of
software can be a large cost factor as well.
C. Assets will typically cost much more than the original capital outlay that it took to purchase it long ago.
Replacement costs can be
very high and a decision to exercise this model should not be made in haste. There are also depreciation
issues to deal with as well.
In any case, this model should be the last resort because of cost and may be the most time consuming.
D. The total replacement model is the transference of risk to an insurance company that covers the costs
of
replacing the critical
assets within your network. The drawbacks are increase in premiums after making a claim, high
premiums
anyway, down time
while the insurance company is processing the claim, and claim may not pay what replacement costs are
today.
E. The total replacement model makes use of preventive measures and regular service as well as
updates
such as Service Packs,
maintenance updates, and patches, before deciding to replace the asset. Preventive measures can also
improve the chances of the
replacement model working better than if the system had no preventive measures ever taken.
Answer: C

SCP certification   SC0-402   SC0-402 exam prep   SC0-402

NO.11 Which of the following best describes the Insurance Model?
A. Before incurring the cost for insuring an inoperative asset, check for maintenance agreements that may
include the cost of
insurance itself.
B. The insurance model is the transference of risk to an insurance company that covers the costs of
replacing the critical assets within
your network. The drawbacks are increase in premiums after making a claim, high premiums anyway,
down time while the
insurance company is processing the claim, and claim may not pay what replacement costs are today.
C. The insurance model makes use of preventive measures and regular service as well as updates such
as
Service Packs, maintenance
updates, and patches. Preventive measures can also improve the chances of the insurance model
working
better than if the system
had no preventive measures ever taken.
D. The insurance model makes use of the acknowledged skills and abilities of the existing personnel.
Knowing that assets have very
specific dollar values assigned to them, the choice on how to manage the asset is based on the
experience
of the personnel.
E. Assets will typically cost much more than the original capital outlay that it took to purchase it long ago.
Insurance costs can be
very high and a decision to exercise this model should not be made in haste. There are also depreciation
issues to deal with as well.
Answer: B

SCP   SC0-402 certification training   SC0-402

NO.12 Signatures are generally divided into what three categories?
A. Corruptions
B. Exploits
C. Accesses
D. DoS attacks
E. Reconnaissance
Answer: BDE

SCP test   SC0-402 dumps   SC0-402   SC0-402

NO.13 What technology is being employed to resist SYN floods by having each side of the connection
attempt create its own sequence number (This sequence number contains a synopsis of the
connection so that if/when the connection attempt is finalized the fist part of the attempt can be
re-created from the sequence number)?
A. SYN cookie
B. SYN floodgate
C. SYN gate
D. SYN damn
E. SYN flood break
Answer: A

SCP certification   SC0-402 dumps   SC0-402 study guide

NO.14 During a discussion of asset classification and protection with a coworker, you realize that your
coworker does not know the basic concepts of asset protection. You are asked to describe the types of
asset protection. Which of the following describes the concept of feasible protection of an asset?
A. The cost to replace the asset is greater than the cost of recovery of the asset
B. The cost to replace the asset is less than the cost of protect the asset
C. The cost to protect the asset is greater than the cost of recovery of the asset.
D. The cost to replace the asset is less than the cost of recovery of the asset
E. The cost to protect the asset is less than the cost of recovery of the asset.
Answer: E

SCP   SC0-402   SC0-402 study guide   SC0-402   SC0-402 questions   SC0-402 exam dumps

NO.15 You have been hired at a large company to manage the network security issues. Prior to your
arrival, there was no one dedicated to security, so you are starting at the beginning. You hold a
meeting and are discussing the main functions and features of network security. One of your
assistants asks what the function of Authentication in network security is. Which of the following
best describes Authentication?
A. Data communications as well as emails need to be protected for privacy and Authentication.
Authentication ensures the privacy of
data on the network system.
B. Authentication is a security principle that ensures the continuous accuracy of data and information
stored within network systems.
Upon receiving the email or data communication, authentication must be verified to ensure that the
message has not been altered,
modified, or added to or subtracted from in transit by unauthorized users.
C. The security must limit user privileges to minimize the risk of unauthorized access to sensitive
information and areas of the
network that only authorized users should only be allowed to access.
D. Security must be established to prevent parties in a data transaction from denying their participation
after the business transaction
has occurred. This establishes authentication for the transaction itself for all parties involved in the
transaction.
E. Authentication verifies users to be who they say they are. In data communications, authenticating the
sender is necessary to verify
that the data came from the right source. The receiver is authenticated as well to verify that the data is
going to the right
destination.
Answer: E

SCP study guide   SC0-402   SC0-402   SC0-402 test   SC0-402   SC0-402

NO.16 You are the firewall administrator for your company and you have just learned that the
Server administrators are gearing up support an L2TP based VPN solution. You are told
to be sure that your firewall rule sets will not hinder the performance of the VPN. Which
of the following ports will you have to allow through the firewall?
A. TCP 1701
B. UDP 1701
C. TCP 443
D. UDP 443
E. TCP1601
Answer: B

SCP   SC0-402   SC0-402 questions

NO.17 It has come to your attention that some host on the web has tried to do some reconnaissance on your
network and send a VRFY command to try and steal user names. What type of attack was used
against your network?
A. SMTP attack
B. Web browser attack
C. IMAP attack
D. IP Spoofing
E. Account scan
Answer: A

SCP   SC0-402 dumps   SC0-402 demo   SC0-402 test   SC0-402

NO.18 You have been hired at a large company to manage network security. Prior to your arrival, there
was no one dedicated to security, so you are starting at the beginning. You hold a meeting and are
discussing the main functions and features of network security. One of your assistants asks what the
function of Confidentiality in network security is. Which of the following best describes
Confidentiality?
A. Confidentiality verifies users to be who they say they are. In data communications, authenticating the
sender is necessary to verify
that the data came from the right source. The receiver is authenticated as well to verify that the data is
going to the right
destination.
B. Data communications as well as emails need to be protected in order to maintain appropriate levels of
privacy and confidentiality.
Network security must provide a secure channel for the transmission of data and email that does not allow
eavesdropping by
unauthorized users. Data confidentiality ensures the privacy of data on the network system.
C. The security must limit user privileges to minimize the risk of unauthorized access to sensitive
information and areas of the
network that only authorized users should only be allowed to access.
D. Security must be established to prevent parties in a data transaction from denying their participation
after the business transaction
has occurred. This establishes Confidentiality for the transaction itself for all parties involved in the
transaction.
E. Confidentiality is a security principle that ensures the continuous accuracy of data and information
stored within network systems.
Data must be kept from unauthorized modification, forgery, or any other form of corruption either from
malicious threats or
corruption that is accidental in nature.
Answer: B

SCP exam dumps   SC0-402   SC0-402   SC0-402

NO.19 The main reason you have been hired at a company is to bring the network security of the
organization up to current standards. A high priority is to have a full security audit of the network
as soon as possible. You have chosen an Independent Audit and are describing it to your coworkers.
Which of the following best describes an Independent Audit?
A. An independent audit is usually conducted by external or outside resources and may be a review or
audit of detailed audit logs.
B. The independent audit is usually done by the current network administrators who ensure the security
measures are up to
international standards.
C. The independent audit is typically done by an internal team who ensures the security measures are up
to
international standards.
D. The independent audit is usually done by internal resources to examine the current daily and on-going
activities within a network
system for compliance with an established security policy.
E. The independent audit is typically done by a contracted outside team of security experts who check for
policy compliance.
Answer: A

SCP   SC0-402 braindump   SC0-402   SC0-402   SC0-402   SC0-402 original questions

NO.20 The main reason you have been hired at a company is to bring the network security of the
organization up to current standards. A high priority is to have a full security audit of the network
as soon as possible. You have chosen an Operational Audit and are describing it to your coworkers.
Which of the following best describes an Operational audit?
A. This type of audit is typically done by a contracted external team of security experts who check for
policy compliance.
B. This type of audit is usually done by internal resources to examine the current daily and on-going
activities within a network
system for compliance with an established security policy.
C. This type of audit is typically done by an internal team who ensures the security measures are up to
international standards.
D. This type of audit is usually done by the current network administrators who ensure the security
measures are up to international
standards.
E. This type of audit is usually conducted by external resources and may be a review or audit of detailed
audit logs.
Answer: B

SCP exam   SC0-402   SC0-402 original questions   SC0-402   SC0-402 questions

ITCertKing offer the latest HP5-K01D exam material and high-quality VCP-510 pdf questions & answers. Our 1Z0-027 VCE testing engine and 00M-670 study guide can help you pass the real exam. High-quality 70-462 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/SC0-402_exam.html

SCP certification SC0-402 exam training methods

If you want to choose passing SCP certification SC0-402 exam to make yourself have a more stable position in today's competitive IT area and the professional ability become more powerful, you must have a strong expertise. And passing SCP certification SC0-402 exam is not very simple. Perhaps passing SCP certification SC0-402 exam is a stepping stone to promote yourself in the IT area, but it doesn't need to spend a lot of time and effort to review the relevant knowledge, you can choose to use our ITCertKing product, a training tool prepared for the IT certification exams.

SCP certification SC0-402 exam has become a very popular test in the IT industry, but in order to pass the exam you need to spend a lot of time and effort to master relevant IT professional knowledge. In such a time is so precious society, time is money. ITCertKing provide a training scheme for SCP certification SC0-402 exam, which only needs 20 hours to complete and can help you well consolidate the related IT professional knowledge to let you have a good preparation for your first time to participate in SCP certification SC0-402 exam.

SCP SC0-402 exam is a Technical Specialist exam. SCP SC0-402 exam can help and promote IT staff have a good career. With a good career, and of course you can create a steady stream of corporate and national interests, so as to promote the development of the national economy. If all of the IT staff can do like this the state will become stronger. ITCertKing SCP SC0-402 exam training materials can help IT personnel to achieve this purpose. We guarantee you 100% to pass the exam. Make the tough decision to choose our ITCertKing SCP SC0-402 exam training materials please.

When you try our part of SCP certification SC0-402 exam practice questions and answers, you can make a choice to our ITCertKing. We will be 100% providing you convenience and guarantee. Remember that making you 100% pass SCP certification SC0-402 exam is ITCertKing.

Exam Code: SC0-402
Exam Name: SCP (Network Defense and Countermeasures (NDC))
One year free update, No help, Full refund!
Total Q&A: 275 Questions and Answers
Last Update: 2013-12-13

We will free provide you part of the exercises of SCP certification SC0-402 exam on the Internet to let you try to test our product's quality. After your trail you will find ITCertKing's exercises is the most comprehensive one and is what you want to.

When you're in pain, it is best to learn things. Learning will make you invincible. ITCertKing SCP SC0-402 exam training materials can also help you to be invincible. With this training materials, you will receive the SCP SC0-402 certification which recognized and accepted internationally. Then all of your life, including money and position, will improve a lot. Until then, will you still feel painful? No, you will be very happy. You should thanks ITCertKing which provide you with a good training materials. It can help you when you lost, and let you not only improve your own quality, but also demonstratethe value of your perfect life.

SC0-402 Free Demo Download: http://www.itcertking.com/SC0-402_exam.html

NO.1 You are the firewall administrator at your company and the network administrators have
decided to implement a VPN solution that will use L2TP. Which port or ports would you
need to allow through the firewall to allow the L2TP traffic to reach the VPN server
inside your network from a remote client?
A. TCP 1723
B. UDP 47
C. UDP 1701
D. TCP 443
E. UDP 500
Answer: C

SCP dumps   SC0-402   SC0-402 test answers   SC0-402 exam prep

NO.2 What technology is being employed to resist SYN floods by having each side of the connection
attempt create its own sequence number (This sequence number contains a synopsis of the
connection so that if/when the connection attempt is finalized the fist part of the attempt can be
re-created from the sequence number)?
A. SYN cookie
B. SYN floodgate
C. SYN gate
D. SYN damn
E. SYN flood break
Answer: A

SCP certification training   SC0-402   SC0-402 study guide   SC0-402 certification training

NO.3 You are considering adding layers to your existing authentication system. Reading through some of
the vendor literature on logon solutions, it frequently mentions two and three factor authentication.
Your assistant asks you to describe the difference between the two. Select the options that correctly
describe two-factor and three-factor authentication:
A. Two-factor authentication is the process providing something you have along with something you
know.
B. Two-factor authentication is the process of providing two forms of authentication, such as a username
and a password.
C. Two-factor authentication is the process of authenticating twice during the login sequence to verify user
identity.
D. Three-factor authentication is the process of providing something you have along with something you
know and something you are.
E. Three-factor authentication is the process of providing three forms of authentication, such as
username,
password, and sitting at
the physical machine to login.
F. Three-factor authentication is the process of authenticating three times during the login sequence to
verify user identity.
Answer: AD

SCP   SC0-402   SC0-402   SC0-402   SC0-402 test questions

NO.4 Your company has decided to allow certain people to work from home. The work that
they do, does not require that they be in the office for anything more than meetings. In
addition, they already have high-speed DSL connections at their homes for personal use.
You have been given the task of figuring out how to get your coworkers to connect to
your company's network securely and reliably. What technology can you use to solve
your problem most effectively?
A. Dedicated Leased Lines (ISDN or T1)
B. Dial-Up via PSTN lines.
C. VPN
D. IPChains
E. IDS
Answer: C

SCP   SC0-402   SC0-402

NO.5 It has come to your attention that some host on the web has tried to do some reconnaissance on your
network and send a VRFY command to try and steal user names. What type of attack was used
against your network?
A. SMTP attack
B. Web browser attack
C. IMAP attack
D. IP Spoofing
E. Account scan
Answer: A

SCP   SC0-402 test questions   SC0-402 braindump

NO.6 Signatures are generally divided into what three categories?
A. Corruptions
B. Exploits
C. Accesses
D. DoS attacks
E. Reconnaissance
Answer: BDE

SCP   SC0-402   SC0-402 original questions   SC0-402   SC0-402

NO.7 You are the firewall administrator at your company and the network administrators have decided to
implement a PPTP VPN solution, which of these ports would you need to allow through the firewall
to allow these VPN sessions into your network?
A. 1723
B. 2317
C. 1273
D. 1372
E. 7132
Answer: A

SCP original questions   SC0-402   SC0-402 study guide   SC0-402   SC0-402

NO.8 Your company has decided to allow certain people to work from home. The work that they do does
not require that they be in the office for anything more than meetings and they already have
personal high-speed DSL connections at their homes. You have been given the task of figuring out
how to get your coworkers to connect to your company's network securely and reliably. What
technology can you use to solve your problem most effectively?
A. Dedicated Leased Lines (ISDN or T1)
B. Dial-Up via PSTN lines.
C. VPN
D. Firewall
E. IDS
Answer: C

SCP pdf   SC0-402   SC0-402

NO.9 You are the firewall administrator for your company and you have just learned that the
Server administrators are gearing up support an L2TP based VPN solution. You are told
to be sure that your firewall rule sets will not hinder the performance of the VPN. Which
of the following ports will you have to allow through the firewall?
A. TCP 1701
B. UDP 1701
C. TCP 443
D. UDP 443
E. TCP1601
Answer: B

SCP   SC0-402 practice test   SC0-402   SC0-402

NO.10 The main reason you have been hired at a company is to bring the network security of the
organization up to current standards. A high priority is to have a full security audit of the network
as soon as possible. You have chosen an Independent Audit and are describing it to your coworkers.
Which of the following best describes an Independent Audit?
A. An independent audit is usually conducted by external or outside resources and may be a review or
audit of detailed audit logs.
B. The independent audit is usually done by the current network administrators who ensure the security
measures are up to
international standards.
C. The independent audit is typically done by an internal team who ensures the security measures are up
to
international standards.
D. The independent audit is usually done by internal resources to examine the current daily and on-going
activities within a network
system for compliance with an established security policy.
E. The independent audit is typically done by a contracted outside team of security experts who check for
policy compliance.
Answer: A

SCP   SC0-402 test answers   SC0-402 test questions   SC0-402 answers real questions

NO.11 You were recently hired as the security administrator of a small business. You are
reviewing the current state of security in the network and find that the current logging
system must be immediately modified. As the system is currently configured, auditing
has no practical value. Which of the following are the reasons that the current auditing
has little value?
A. The logs go unchecked.
B. The logs are automatically deleted after three months.
C. The logs are deleted using FIFO and capped at 500Kb.
D. The only auditing is successful file access events.
E. The logs are deleted using FIFO and capped at 5000Kb.
Answer: AD

SCP answers real questions   SC0-402   SC0-402 test questions   SC0-402 questions

NO.12 Which of the following best describes the Total Replacement Model?
A. The total replacement model makes use of the acknowledged skills and abilities of the existing
personnel. Knowing that assets
have very specific dollar values assigned to them, the choice on how to manage the asset is based on the
experience of the
personnel.
B. Before incurring the cost for replacing of an inoperative asset, check for maintenance agreements that
may include the cost of
repair or the actual repair itself. Nevertheless, the total replacement model should focus on the repairing
of
the downed asset to its
working status within the network infrastructure. Keep in mind that after hardware costs, costs for the
reloading or replacement of
software can be a large cost factor as well.
C. Assets will typically cost much more than the original capital outlay that it took to purchase it long ago.
Replacement costs can be
very high and a decision to exercise this model should not be made in haste. There are also depreciation
issues to deal with as well.
In any case, this model should be the last resort because of cost and may be the most time consuming.
D. The total replacement model is the transference of risk to an insurance company that covers the costs
of
replacing the critical
assets within your network. The drawbacks are increase in premiums after making a claim, high
premiums
anyway, down time
while the insurance company is processing the claim, and claim may not pay what replacement costs are
today.
E. The total replacement model makes use of preventive measures and regular service as well as
updates
such as Service Packs,
maintenance updates, and patches, before deciding to replace the asset. Preventive measures can also
improve the chances of the
replacement model working better than if the system had no preventive measures ever taken.
Answer: C

SCP test answers   SC0-402 demo   SC0-402

NO.13 You have been hired at a large company to manage network security. Prior to your arrival, there
was no one dedicated to security, so you are starting at the beginning. You hold a meeting and are
discussing the main functions and features of network security. One of your assistants asks what the
function of Confidentiality in network security is. Which of the following best describes
Confidentiality?
A. Confidentiality verifies users to be who they say they are. In data communications, authenticating the
sender is necessary to verify
that the data came from the right source. The receiver is authenticated as well to verify that the data is
going to the right
destination.
B. Data communications as well as emails need to be protected in order to maintain appropriate levels of
privacy and confidentiality.
Network security must provide a secure channel for the transmission of data and email that does not allow
eavesdropping by
unauthorized users. Data confidentiality ensures the privacy of data on the network system.
C. The security must limit user privileges to minimize the risk of unauthorized access to sensitive
information and areas of the
network that only authorized users should only be allowed to access.
D. Security must be established to prevent parties in a data transaction from denying their participation
after the business transaction
has occurred. This establishes Confidentiality for the transaction itself for all parties involved in the
transaction.
E. Confidentiality is a security principle that ensures the continuous accuracy of data and information
stored within network systems.
Data must be kept from unauthorized modification, forgery, or any other form of corruption either from
malicious threats or
corruption that is accidental in nature.
Answer: B

SCP exam   SC0-402 test answers   SC0-402 exam dumps   SC0-402   SC0-402

NO.14 During a discussion of asset classification and protection with a coworker, you realize that your
coworker does not know the basic concepts of asset protection. You are asked to describe the types of
asset protection. Which of the following describes the concept of feasible protection of an asset?
A. The cost to replace the asset is greater than the cost of recovery of the asset
B. The cost to replace the asset is less than the cost of protect the asset
C. The cost to protect the asset is greater than the cost of recovery of the asset.
D. The cost to replace the asset is less than the cost of recovery of the asset
E. The cost to protect the asset is less than the cost of recovery of the asset.
Answer: E

SCP certification training   SC0-402 practice test   SC0-402   SC0-402 exam prep

NO.15 You have been hired at a large company to manage the network security issues. Prior to your
arrival, there was no one dedicated to security, so you are starting at the beginning. You hold a
meeting and are discussing the main functions and features of network security. One of your
assistants asks what the function of Authentication in network security is. Which of the following
best describes Authentication?
A. Data communications as well as emails need to be protected for privacy and Authentication.
Authentication ensures the privacy of
data on the network system.
B. Authentication is a security principle that ensures the continuous accuracy of data and information
stored within network systems.
Upon receiving the email or data communication, authentication must be verified to ensure that the
message has not been altered,
modified, or added to or subtracted from in transit by unauthorized users.
C. The security must limit user privileges to minimize the risk of unauthorized access to sensitive
information and areas of the
network that only authorized users should only be allowed to access.
D. Security must be established to prevent parties in a data transaction from denying their participation
after the business transaction
has occurred. This establishes authentication for the transaction itself for all parties involved in the
transaction.
E. Authentication verifies users to be who they say they are. In data communications, authenticating the
sender is necessary to verify
that the data came from the right source. The receiver is authenticated as well to verify that the data is
going to the right
destination.
Answer: E

SCP   SC0-402   SC0-402   SC0-402   SC0-402

NO.16 During a discussion of asset classification and protection with a coworker, you realize that your
coworker does not know the basic concepts of asset protection. You are asked to describe the types of
asset protection. Which of the following describes the concept of an infeasible protection of an asset?
A. The cost to protect the asset is greater than the cost of recovery of the asset
B. The cost to replace the asset is less than the cost of recovery of the asset
C. the cost to protect the asset is infeasible to determine
D. The cost to replace the asset is greater than the cost of recovery of the asset
E. The cost to protect the asset is less than the cost of recovery of the asset
Answer: A

SCP questions   SC0-402 exam simulations   SC0-402 braindump   SC0-402 test questions   SC0-402

NO.17 Which of the following best describes the Repair Model?
A. The model makes use of preventive measures and regular service as well as updates such as Service
Packs, maintenance updates,
and patches. Preventive measures can also improve the chances of the repair model working better than
if
the system had no
preventive measures ever taken.
B. The repair model is the transference of risk to an insurance company that covers the costs of replacing
the critical assets within
your network. The drawbacks are increase in premiums after making a claim, high premiums anyway,
down time while the
insurance company is processing the claim, and claim may not pay what replacement costs are today.
C. Assets will typically cost much more than the original capital outlay that it took to purchase it long ago.
Repair costs can be very
high and a decision to exercise this model should not be made in haste. There are also depreciation
issues
to deal with as well. In
any case, this model should be the last resort because of cost and may be the most time consuming.
D. The repair model makes use of the acknowledged skills and abilities of the existing personnel.
Knowing that assets have very
specific dollar values assigned to them, the choice on how to manage the asset is based on the
experience
of the personnel.
E. Before incurring the cost for repair of an inoperative asset, check for maintenance agreements that
may
include the cost of repair
or the actual repair itself. Nevertheless, the repair model should focus on the restoration of the downed
asset to its working status
within the network infrastructure. Keep in mind that after hardware costs, costs for the reloading or
replacement of software can
be a large cost factor as well.
Answer: E

SCP exam   SC0-402   SC0-402 answers real questions   SC0-402   SC0-402   SC0-402

NO.18 Which of the following best describes the Insurance Model?
A. Before incurring the cost for insuring an inoperative asset, check for maintenance agreements that may
include the cost of
insurance itself.
B. The insurance model is the transference of risk to an insurance company that covers the costs of
replacing the critical assets within
your network. The drawbacks are increase in premiums after making a claim, high premiums anyway,
down time while the
insurance company is processing the claim, and claim may not pay what replacement costs are today.
C. The insurance model makes use of preventive measures and regular service as well as updates such
as
Service Packs, maintenance
updates, and patches. Preventive measures can also improve the chances of the insurance model
working
better than if the system
had no preventive measures ever taken.
D. The insurance model makes use of the acknowledged skills and abilities of the existing personnel.
Knowing that assets have very
specific dollar values assigned to them, the choice on how to manage the asset is based on the
experience
of the personnel.
E. Assets will typically cost much more than the original capital outlay that it took to purchase it long ago.
Insurance costs can be
very high and a decision to exercise this model should not be made in haste. There are also depreciation
issues to deal with as well.
Answer: B

SCP practice test   SC0-402   SC0-402   SC0-402   SC0-402   SC0-402

NO.19 The main reason you have been hired at a company is to bring the network security of the
organization up to current standards. A high priority is to have a full security audit of the network
as soon as possible. You have chosen an Operational Audit and are describing it to your coworkers.
Which of the following best describes an Operational audit?
A. This type of audit is typically done by a contracted external team of security experts who check for
policy compliance.
B. This type of audit is usually done by internal resources to examine the current daily and on-going
activities within a network
system for compliance with an established security policy.
C. This type of audit is typically done by an internal team who ensures the security measures are up to
international standards.
D. This type of audit is usually done by the current network administrators who ensure the security
measures are up to international
standards.
E. This type of audit is usually conducted by external resources and may be a review or audit of detailed
audit logs.
Answer: B

SCP   SC0-402   SC0-402   SC0-402 test

NO.20 You have been hired at a large company to manage network. Prior to your arrival, there
was no one dedicated to security, so you are starting at the beginning. You hold a
meeting and are discussing the main functions and features of network security. One of
your assistants asks what the function of Integrity in network security is. Which of the
following best describes Integrity?
A. The security must limit user privileges to minimize the risk of unauthorized access to sensitive
information and areas of the
network that only authorized users should only be allowed to access.
B. Integrity verifies users to be who they say they are. In data communications, the integrity of the sender
is necessary to verify that
the data came from the right source. The receiver is authenticated as well to verify that the data is going
to
the right destination.
C. Data communications as well as emails need to be protected for privacy and Integrity. Integrity ensures
the privacy of data on the
network system.
D. Integrity is a security principle that ensures the continuous accuracy of data and information stored
within network systems. Data
must be kept from unauthorized modification, forgery, or any other form of corruption either from
malicious threats or corruption
that is accidental in nature. Upon receiving the email or data communication, integrity must be verified to
ensure that the message
has not been altered, modified, or added to or subtracted from in transit by unauthorized users.
E. Security must be established to prevent parties in a data transaction from denying their participation
after the business transaction
has occurred. This establishes integrity for the transaction itself for all parties involved in the transaction.
Answer: D

SCP   SC0-402   SC0-402   SC0-402 practice test   SC0-402 answers real questions   SC0-402 dumps

ITCertKing offer the latest 1Z0-478 exam material and high-quality 646-206 pdf questions & answers. Our 70-483 VCE testing engine and C_TADM51_70 study guide can help you pass the real exam. High-quality FCNSA.v5 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/SC0-402_exam.html

Featured SCP certification SC0-411 exam test questions and answers

We are aware that the IT industry is a new industry. It is one of the chain to drive economic development. So its status can not be ignored. IT certification is one of the means of competition in the IT industry. Passed the certification exam you will get to a good rise. But pass the exam is not easy. It is recommended that using training tool to prepare for the exam. If you want to choose this certification training resources, ITCertKing's SCP SC0-411 exam training materials will be the best choice. The success rate is 100%, and can ensure you pass the exam.

Selecting ITCertKing can 100% help you pass the exam. According to SCP SC0-411 test subjects' changing, we will continue to update our training materials and will provide the latest exam content. ITCertKing can provide a free 24-hour online customer service for you . If you do not pass SCP certification SC0-411 exam, we will full refund to you.

ITCertKing senior experts have developed exercises and answers about SCP certification SC0-411 exam with their knowledge and experience, which have 95% similarity with the real exam. I believe that you will be very confident of our products. If you choose to use ITCertKing's products, ITCertKing can help you 100% pass your first time to attend SCP certification SC0-411 exam. If you fail the exam, we will give a full refund to you.

Exam Code: SC0-411
Exam Name: SCP (Hardening the Infrastructure (HTI))
One year free update, No help, Full refund!
Total Q&A: 410 Questions and Answers
Last Update: 2013-11-06

SCP SC0-411 certificate can help you a lot. It can help you improve your job and living standard, and having it can give you a great sum of wealth. SCP certification SC0-411 exam is a test of the level of knowledge of IT professionals. ITCertKing has developed the best and the most accurate training materials about SCP certification SC0-411 exam. Now ITCertKing can provide you the most comprehensive training materials about SCP SC0-411 exam, including exam practice questions and answers.

ITCertKing website is fully equipped with resources and the questions of SCP SC0-411 exam, it also includes the SCP SC0-411 exam practice test. Which can help candidates prepare for the exam and pass the exam. You can download the part of the trial exam questions and answers as a try. ITCertKing provide true and comprehensive exam questions and answers. With our exclusive online SCP SC0-411 exam training materials, you'll easily through SCP SC0-411 exam. Our site ensure 100% pass rate.

SC0-411 Free Demo Download: http://www.itcertking.com/SC0-411_exam.html

NO.1 You are in the process of securing several new machines on your Windows 2000
network. To help with the process Microsoft has defined a set of Security Templates
to use in various situations. Which of the following best describes the Basic Security
Template?
A. This template is provided as a way to reverse the implementation of different
Windows 2000 security settings, except for user rights.
B. This template is provided so that Local Users have ideal security settings, while Power
Users have settings that are compatible with NT 4 Users.
C. This template is provided to implement suggested security settings for all security
areas, except for the following: files, folders, and Registry keys.
D. This template is provided to create the maximum level of security for network traffic
between Windows 2000 clients.
E. This template is provided to allow for an administrator to run legacy applications on a
DC.
Answer: A

SCP demo   SC0-411   SC0-411   SC0-411 study guide

NO.2 You wish to add a new group to your Linux system. The group is called
SCNP_Admins, and is to be given a Group Identifier of 1024. What is the correct
command to add this new group?
A. addgroup SCNP_Admins -id 1024
B. groupadd -g 1024 SCNP_Admins
C. addgroup SCNP_Admins id/1024
D. groupadd id/1024 g/SCNP_Admins
E. groupadd g/1024 SCNP_Admins
Answer: B

SCP   SC0-411   SC0-411   SC0-411

NO.3 As you become more involved in the security and networking of your organization,
you wish to learn the exact details of the protocols in use. It is suggested to you, by a
friend, that you check the RFC for each protocol. What is an RFC?
A. An RFC is a program that has a searchable index to troubleshoot network problems.
B. An RFC is a document that discusses issues surrounding the Internet, networking
technologies, and/or networking protocols.
C. An RFC is a hidden resource, which can be called up via the Windows Help file to
identify details about networking protocols.
D. An RFC is a single document that details all the communications protocols and
technologies used on the Internet.
E. An RFC is a single document that details all the communications protocols and
technologies used on an Intranet.
Answer: B

SCP braindump   SC0-411   SC0-411 exam   SC0-411   SC0-411 certification training

NO.4 In the last few days, users have reported to you that they have each received two
emails from an unknown source with file attachments. Fortunately the users have
listened to your training and no one has run the attached program. You study the
attachment on an isolated computer and find that it is a program that is designed to
execute a payload when the system clock registers 10:10 PM on February 29. Which
of the following best identifies the type of program is the attachment?
A. Mail Bomb
B. Logic Bomb
C. Polymorphic Virus
D. Stealth Virus
E. Polymorphic Trojan
Answer: B

SCP   SC0-411 pdf   SC0-411

NO.5 You are configuring a wildcard mask for the subnet 10.12.24.0 / 255.255.248.0.
Which of the following is the wildcard mask to use for this subnet?
A. 0.255.255.255
B. 10.12.24.255
C. 0.0.248.0
D. 255.255.248.0
E. 0.0.7.255
Answer: E

SCP   SC0-411   SC0-411

NO.6 One way to find out more about a company's infrastructure layout is to send email
to a non-existent user of the target organization. When this email bounces back as
undeliverable, you can read the message source. Which of the following pieces of
information can be derived from the returned message source?
A. Target company's email server's hostname.
B. Target company's email server's public IP address.
C. Target company's internal IP addressing scheme.
D. Target company's email server's application name and version, if provided.
E. Target company's employees' email addresses.
Answer: ABD

SCP demo   SC0-411   SC0-411

NO.7 You are creating the contingency plan for the network in hospital where you just
started working. The network has about 300 PCs, about 50 Servers, and is
interconnected into some of the critical patient systems for monitoring purposes.
What is the appropriate level of backup power for this type of network?
A. Building Generator
B. Personal UPS
C. Alternative Fuel-Cell Technology
D. Server Rack UPS
E. Electrical Company
Answer: A

SCP   SC0-411   SC0-411   SC0-411

NO.8 If you wish to change the permissions of a parent directory in your Linux system,
and want the permissions to be changed on the files and subdirectories in the parent
directory to be the same, what switch must you use?
A. -G
B. -R
C. -P
D. -S
E. -F
Answer: B

SCP certification training   SC0-411   SC0-411 answers real questions   SC0-411 exam dumps

NO.9 When you took over the security responsibilities at your office, you noticed there
were no warning banners on any of the equipment. You have decided to create a
warning login banner on your Cisco router. Which of the following shows the
correct syntax for the banner creation?
A. banner login C Restricted access. Only authorized users allowed to access this device.
B. login banner C Restricted access. Only authorized users allowed to access this device.
C. banner login Restricted access. Only authorized users allowed to access this device.
D. login banner Restricted access. Only authorized users allowed to access this device.
E. banner logging C Restricted access. Only authorized users allowed to access this
device. C
Answer: A

SCP   SC0-411 practice test   SC0-411   SC0-411 test   SC0-411   SC0-411

NO.10 You are configuring the IP addressing for your network. One of the subnets has
been defined with addresses already. You run ifconfig on a host and determine that
it has an address of 172.18.32.54 with a mask of 255.255.254.0. What is the network
ID to which this host belongs?
A. 172.18.0.0
B. 0.0.32.0
C. 172.0.0.0
D. 172.18.32.32
E. 172.18.32.0
Answer: E

SCP   SC0-411   SC0-411 exam

NO.11 You are creating the contingency plan, and are trying to take into consideration as
many of the disasters as you can think of. Which of the following are examples of
technological disasters?
A. Hurricane
B. Terrorism
C. Tornado
D. Virus
E. Trojan Horse
Answer: BDE

SCP   SC0-411   SC0-411   SC0-411   SC0-411   SC0-411

NO.12 If an attacker uses a program that sends thousands of email messages to every user
of the network, some of them with over 50MB attachments. What are the possible
consequences to the email server in the network?
A. Server hard disk can fill to capacity
B. Client hard disks can fill to capacity
C. Server can completely crash
D. Network bandwidth can be used up
E. Clients cannot receive new email messages
Answer: AC

SCP   SC0-411   SC0-411   SC0-411

NO.13 You work for a mid sized ISP on the West Coast of the United Kingdom. Recently
you have noticed that there are an increasing number of attacks on the Internet
routers used in the company. The routers are physically secured well, so you can be
somewhat confident the attacks are all remote. Which of the following are legitimate
threats the routers are facing, under this situation?
A. Damaged Cables
B. False Data Injection
C. Social Engineering
D. Unauthorized Remote Access
E. Denial of Service
Answer: BDE

SCP   SC0-411 practice test   SC0-411 exam prep   SC0-411 certification training   SC0-411 demo

NO.14 You have recently installed an Apache Web server on a Red Hat Linux machine.
When you return from lunch, you find that a colleague has made a few
configuration changes. One thing you notice is a .htpasswd file. What is the function
of this file?
A. It is a copy of the /etc/passwd file for Web access
B. It is a copy of the etc/shadow file for Web access
C. It is a listing of all anonymous users to the Web server
D. It is a listing of http users and passwords for authentication
E. It is a database file that can be pulled remotely via a web interface to identify currently
logged in users.
Answer: D

SCP exam simulations   SC0-411 practice test   SC0-411

NO.15 When a new user account is created in Linux, what values are assigned?
A. Shell_GID
B. SetGID
C. SetUID
D. UID
E. GID
Answer: DE

SCP   SC0-411 pdf   SC0-411   SC0-411   SC0-411   SC0-411

NO.16 Which of the following is implemented in an IPv6 environment, which helps to
increase security?
A. EFS
B. IPsec
C. Caching
D. S/MIME
E. Destination and Source Address Encryption
Answer: B

SCP   SC0-411   SC0-411 exam   SC0-411 exam dumps   SC0-411 test

NO.17 You have recently hired an assistant to help you with managing the security of your
network. You are currently running an all Windows environment, and are
describing NTFS permission issues. You are using some demonstration files to help
with your discussion. You have two NTFS partitions, C:\ and D:\ There is a test file,
C:\DIR1\test.txt that is currently set so that only Administrators have Full Control.
If you move this file to the C:\DIR2 folder, what will the permissions be for this file?
A. The file will have the same permissions as D:\DIR2
B. The file permissions will remain the same
C. The file permissions will be lost
D. The file permissions will convert to Everyone - Full Control
E. The permissions will be set to whatever the CREATOR OWNER permissions are for
the D:\ partition
Answer: B

SCP test questions   SC0-411   SC0-411 dumps   SC0-411   SC0-411 practice test   SC0-411 exam simulations

NO.18 In Windows 2000, there are four methods of implementing IPSec. They are:
1. Require Security
2 - Request Security
3 - Respond Only
4 - No IPSec Policy
Your network hosts many servers, and different security policies are in place in
different locations in the network. The Clients and Servers in your network are
configured as follows:
-You have servers numbered 1-9, which have a policy stating they require no
network traffic security.
-You have servers numbered 10-19, which have a policy stating they are not
required to be secure, but will encrypt network traffic if the client is able to receive
it.
-You have servers numbered 20-29, which have a policy stating they are required to
be secure and all network traffic they deliver must be secured.
-You have clients numbered 60-79 that are required to access secure servers 20-29.
-You have clients numbered 80-99 that are not required to access secure servers
20-29, but are required to access servers 1-9 and 10-19.
Based on the Client and Server configuration provided above, which of the
following computers will implement IPSec method 2?
A. Computers numbered 1-9
B. Computers numbered 10-19
C. Computers numbered 20-29
D. Computers numbered 60-79
E. Computers numbered 80-99
Answer: B

SCP   SC0-411   SC0-411 exam simulations   SC0-411 pdf   SC0-411 answers real questions

NO.19 In order to properly manage the network traffic in your organization, you need a
complete understanding of protocols and networking models. In regards to the
7-layer OSI model, what is the function of the Transport Layer?
A. The Transport layer allows two applications on different computers to establish, use,
and end a session. This layer establishes dialog control between the two computers in a
session, regulating which side transmits, plus when and how long it transmits.
B. The Transport layer manages logical addresses. It also determines the route from the
source to the destination computer and manages traffic problems, such as routing, and
controlling the congestion of data packets.
C. The Transport layer packages raw bits from the Physical (Layer 1) layer into frames
(structured packets for data). Physical addressing (as opposed to network or logical
addressing) defines how devices are addressed at the data link layer. This layer is
responsible for transferring frames from one computer to another, without errors. After
sending a frame, it waits for an acknowledgment from the receiving computer.
D. The Transport layer transmits bits from one computer to another and regulates the
transmission of a stream of bits over a physical medium. For example, this layer defines
how the cable is attached to the network adapter and what transmission technique is used
to send data over the cable.
E. The Transport layer handles error recognition and recovery. It also repackages long
messages, when necessary, into small packets for transmission and, at the receiving end,
rebuilds packets into the original message. The corresponding Transport layer at the
receiving end also sends receipt acknowledgments.
Answer: E

SCP   SC0-411 test   SC0-411   SC0-411 test answers   SC0-411   SC0-411 questions

NO.20 What is the function of the HFNetChk tool from Microsoft?
A. To check for the current Hotfixes that are available from Microsoft
B. It is an upgrade to the Windows Update tool for checking on all updates
C. It is the tool that must be run prior to installing IIS 5.0
D. It is the tool that checks the network configuration of all web servers
E. To record what Hotfixes and service packs are running on the Windows machine
Answer: E

SCP   SC0-411 practice test   SC0-411 certification training   SC0-411   SC0-411 pdf

NO.21 You are configuring the Access Lists for your new Cisco Router. The following are
the commands that are entered into the router for the list configuration.
Router(config)#access-list 145 deny tcp any 10.10.0.0 0.0.255.255 eq 80
Router(config)#access-list 145 deny tcp any 10.10.0.0 0.0.255.255 eq 119
Router(config)#access-list 145 permit ip any any
Router(config)#interface Serial 0
Router(config-if)#ip access-group 145 in
Router(config-if)#interface Ethernet 0
Router(config-if)# ip access-group 145 in
Router(config-if)#interface Ethernet 1
Router(config-if)# ip access-group 145 in
Router(config-if)#interface Ethernet 2
Router(config-if)# ip access-group 145 in
Based on this configuration, and using the exhibit, select the answers that identify
what the list will accomplish.
A. Permit network 10.10.10.0 to access NNTP on the Internet
B. Permit network 10.10.10.0 to access NNTP on network 10.10.11.0
C. Permit network 10.10.10.0 to access NNTP on network 10.10.12.0
D. Deny network 10.10.10.0 to access Internet WWW sites
E. Permit network 10.10.10.0 to access Internet WWW sites
Answer: AE

SCP practice test   SC0-411   SC0-411 test answers

NO.22 In a TCP Header, what is the function of the first sixteen bits?
A. To define the type
B. To define the IP Version
C. To define the destination port number
D. To define the upper layer protocol
E. To define the source port number
Answer: E

SCP   SC0-411   SC0-411 test answers   SC0-411 pdf   SC0-411

NO.23 You are configuring the dial up options in your Windows 2000 network. While you
do so, you are studying the configuration options available to you. You notice the
term RADIUS used often during your research. What does RADIUS provide?
A. RADIUS is used to define the implementation method of Kerberos in a network.
B. RADIUS is used to define the implementation method of PKI in a network.
C. RADIUS is used to define the implementation method of Biometrics in a network.
D. RADIUS is a standard that provides authorization, authentication, identification, and
accounting services.
E. RADIUS is a standard that defines the methods used to secure the connections
between a dialup client and a dialup server.
Answer: D

SCP   SC0-411 study guide   SC0-411 questions   SC0-411   SC0-411

NO.24 In order to perform promiscuous mode captures using the Ethereal capture tool on
a Windows 2000 machine, what must first be installed?
A. IPv4 stack
B. IPv6 stack
C. WinPcap
D. Nothing, it will capture by default
E. At least two network adapters
Answer: C

SCP exam   SC0-411   SC0-411

NO.25 In your network, you manage a mixed environment of Windows, Linux, and UNIX
computers. The clients run Windows 2000 Professional and Windows NT 4.0
Workstation, while the Servers are UNIX and Linux based with custom
applications. During routine administration you successfully ping several nodes in
the network. During this you are running a packet capture for further analysis.
When examining one of the frames you notice that the Ethernet address for the
source is 1ED0.097E.E5E9 and that for the destination is 1ED0.096F.5B13. From
this information you gather that:
A. They are in different networks
B. The destination address is in the 1ED0 subnet
C. The network cards are by the same manufacturer
D. The destination address is in the 1ED0.09AA subnet
E. The source and destination share the same MAC subnet
Answer: C

SCP   SC0-411 exam simulations   SC0-411 answers real questions

NO.26 The exhibit shows a router with three interfaces E0, E1 and S0. Interfaces E0 and
E1 are connected to internal networks 192.168.10.0 and 192.168.20.0 respectively
and interface S0 is connected to the Internet.
The objective is to allow two hosts, 192.168.20.16 and 192.168.10.7 access to the
Internet while all other hosts are to be denied Internet access. All hosts on network
192.168.10.0 and 192.168.20.0 must be allowed to access resources on both internal
networks. From the following, select all the access list statements that are required
to make this possible.
A. access-list 53 permit 192.168.20.16 0.0.0.0
B. access-list 80 permit 192.168.20.16 0.0.0.0
C. access-list 53 deny 0.0.0.0 255.255.255.255
D. access-list 80 permit 192.168.10.7 0.0.0.0
E. int S0, ip access-group 53 out
F. int S0, ip access-group 80 out
Answer: BDF

SCP   SC0-411 certification training   SC0-411   SC0-411 test questions

NO.27 Which of the following fields are found in a user account's line in the /etc/passwd
file?
A. The User Identifier assigned to the user account
B. The home directory used by the user account
C. The number of days since the user account password was changed
D. The full name for the user account
E. The number of days until the user account's password must change
Answer: ABD

SCP exam prep   SC0-411   SC0-411 original questions

NO.28 You are reviewing the Xinetd configuration file for the ftp service. If the following
line found in this file, what is the line's function?
redirect = 192.168.10.1 3456
A. That only 192.168.10.1 can make ftp requests
B. That only hosts in the 192.168.10.0/24 network can make ftp requests
C. That only 3456 connections are allowed to the ftp service on 192.168.10.1
D. That the overall Xinetd configuration has redirect lines in it
E. That the ftp service is redirected to IP 192.168.10.1 on port 3456
Answer: E

SCP test answers   SC0-411 exam prep   SC0-411 answers real questions   SC0-411   SC0-411

NO.29 If you are looking for plain-text ASCII characters in the payload of a packet you
capture using Network Monitor, which Pane will provide you this information?
A. Summary Pane
B. Packet Pane
C. Collection Pane
D. Hex Pane
E. Detail Pane
Answer: D

SCP   SC0-411   SC0-411   SC0-411 exam dumps

NO.30 In order to add to your layered defense, you wish to implement some security
configurations on your router. If you wish to have the router work on blocking TCP
SYN attacks, what do you add to the end of an ACL statement?
A. The IP addresses for allowed networks
B. The port range of allowed applications
C. The word Established
D. The word Log
E. The string: no service udp-small-servers
Answer: C

SCP   SC0-411 original questions   SC0-411 braindump   SC0-411 study guide

ITCertKing offer the latest exam material and high-quality VCPC510 pdf questions & answers. Our 70-561 VCE testing engine and 648-238 study guide can help you pass the real exam. High-quality 700-101 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/SC0-411_exam.html