SC0-451 : Tactical Perimeter Defense Exam

SC0-451 Dumps SC0-451 Braindumps
SC0-451 Real Questions SC0-451 Practice Test SC0-451 Actual Questions
SCP
SC0-451
Tactical Perimeter Defense
https://killexams.com/pass4sure/exam-detail/SC0-451
QUESTION: 169
You are considering your options for a new firewall deployment. At which two layers of the OSI model does a simple (stateless) packet filtering firewall operate?
1. Data Link
2. Application
3. Session
4. Presentation
5. Network
Answer: A,E
QUESTION: 170
The following exhibit is a screen shot of a capture using Network Monitor. Examine the details as shown for a frame and identify which of the statements that follow best describes it.
1. This frame represents an ICMP echo message between the two hosts
2. This frame represents an IP broadcast trying to resolve the target IP address to its MAC address
3. This frame represents an Ethernet broadcast trying to resolve the target IP address to its MAC address
4. This frame represents a reply from the target machine with the appropriate resolution
5. This frame represents the first fragment of the three-way handshake.
QUESTION: 171
Which of the following is a potential weakness of a commercial firewall product that is installed on a hardened machine?
1. That you will not be able to use it in conjunction with personal firewalls on user's desktop machines.
2. You will have to give the vendor confidential network information.
3. You will be required to use the configuration that the vendor assigns you.
4. That the firewall's vendor may be compromised and your private information may publicly available.
5. That it may be vulnerable to attacks targeting the underlying Operating System.
Answer: E
QUESTION: 172
Which of the following is a potential weakness of a commercial firewall product that is installed on a hardened machine?
1. That you will not be able to use it in conjunction with personal firewalls on user's desktop machines.
2. You will have to give the vendor confidential network information.
3. You will be required to use the configuration that the vendor assigns you.
4. That the firewall's vendor may be compromised and your private information may publicly available.
5. That it may be vulnerable to attacks targeting the underlying Operating System.
Answer: E
QUESTION: 173
In order to perform promiscuous mode captures using the Wireshark capture tool on a Windows Server 2003 machine, what must first be installed?
1. IPv4 stack
2. IPv6 stack
3. WinPcap
4. Nothing, it will capture by default
5. At least two network adapters
QUESTION: 174
You have found a user in your organization who has managed to gain access to a system that this user was not granted the right to use. This user has just provided you with a working example of which of the following?
1. Intrusion
2. Misuse
3. Intrusion detection
4. Misuse detection
5. Anomaly detection
Answer: A
QUESTION: 175
You have recently been contracted to implement a new firewall solution at a client site. What are the two basic forms firewall implementations?
1. Chaining
2. Stateful
3. DMZ
4. Stateless
5. KMZ
Answer: B,D
QUESTION: 176
You are considering your options for a new firewall deployment. At which two layers of the OSI model does a simple (stateless) packet filtering firewall operate?
1. Data Link
2. Application
3. Session
4. Presentation
5. Network
Answer: A,E
QUESTION: 177
Your organization has extensive resources that you must make available to authorized users, through your ISA Server 2006. From the following answers, select the one that is not a feature of ISA Server Content Publishing:
1. Secure Sockets Layer (SSL) Bridging
2. Web Caching and Delivery
3. Web Publishing Load Balancing
4. Enhanced Multi-factor Authentication
5. Robust Logging and Reporting
Answer: B
QUESTION: 178
The exhibit shows a router with three interfaces EO, E1 and SO. Interfaces EO and E1 are connected to internal networks 192.168.10.0 and 192.168.20.0 respectively and interface SO is connected to the Internet. The objective is to allow only network 192.168.20.0 to access e-commerce Web sites on the Internet, while allowing all internal hosts to access resources within the internal network. From the following, select all the access list statements that are required to make this possible.
1. access-list 113 permit tcp 192.168.20.0 0.0.0.255 any eq 80
2. access-list 113 permit tcp 192.168.20.0 0.0.0.255 any eq 53
3. access-list 113 permit tcp 192.168.20.0 0.0.0.255 any eq 443
D. access-list 113 permit tcp 192.168.20.0 0.0.0.255 any It 1023
1. int SO, ip access-group 113 in
2. int E1, ip access-group 113 in
3. int SO, ip access-group 113 out
Answer: A,B,C,G
QUESTION: 179.
In your office, you are building the new wireless network, and you will need to install several access points. What do wireless access points use to counter multipath interference?
1. Multiple encryption algorithms
2. Multiple Antennas
3. Multiple radio frequencies
4. Duplicate packet transfer
5. Secondary transmissions
Answer: B
QUESTION: 180.
One of the firewall choices you are thinking of implementing, in your network, is a proxy server. A proxy server can accomplish which of the following statements?
1. Cache web pages for increased performance
2. Operate at the Application layer of the OSI model
3. Allow direct communication between an internal and external host
4. Permit or deny traffic based upon type of service
5. Filter executables that are attached to an e-mail
Answer: A,B,D,E

User: Mila***** The question bank provided by Killexams.com is extremely useful, and I recommend it to anyone preparing for these exams. Congratulations on a well-thought-out and executed product. I passed my SC0-451 exam thanks to your materials.

User: Izz***** The team at killexams.com is cooperative and capable, and they provided me with excellent material for sc0-451 practice tests. I am grateful for their support and recommend killexams.com to anyone preparing for the exam.

User: Helen***** Thanks to Killexams.com, I prepared for the tactical perimeter defense exam and discovered that they have pretty correct stuff. I am confident that I can go for other SCP exams as well.

User: Khabib***** As an IT professional, the SC0-451 exam was crucial for me, but I had limited time to prepare. The easy-to-memorize answers in the Killexams.com study guide made it much easier. It worked as a complete reference guide, and I was amazed by the results. I referred to the guide two weeks before the exam and completed all the questions well within the stipulated time.

User: Claudia***** I passed both my SC0-451 exam last week and another exam earlier this month, thanks to Killexams.com practice tests. As many others have mentioned, these materials are an excellent way to prepare for the exam or to gain a deeper understanding of the subject matter. I faced many challenging questions on the exam, but fortunately, I knew all the answers, thanks to the study materials.

---