Exam Code : SC0-451
Exam Name : Tactical Perimeter Defense
Vendor Name :
"SCP"
SC0-451 Dumps SC0-451 Braindumps
SC0-451 Real Questions SC0-451 Practice Test SC0-451 Actual Questions
Tactical Perimeter Defense
https://killexams.com/pass4sure/exam-detail/SC0-451
You are considering your options for a new firewall deployment. At which two layers of the OSI model does a simple (stateless) packet filtering firewall operate?
Data Link
Application
Session
Presentation
Network
The following exhibit is a screen shot of a capture using Network Monitor. Examine the details as shown for a frame and identify which of the statements that follow best describes it.
This frame represents an ICMP echo message between the two hosts
This frame represents an IP broadcast trying to resolve the target IP address to its MAC address
This frame represents an Ethernet broadcast trying to resolve the target IP address to its MAC address
This frame represents a reply from the target machine with the appropriate resolution
This frame represents the first fragment of the three-way handshake.
Which of the following is a potential weakness of a commercial firewall product that is installed on a hardened machine?
That you will not be able to use it in conjunction with personal firewalls on user's desktop machines.
You will have to give the vendor confidential network information.
You will be required to use the configuration that the vendor assigns you.
That the firewall's vendor may be compromised and your private information may publicly available.
That it may be vulnerable to attacks targeting the underlying Operating System.
Which of the following is a potential weakness of a commercial firewall product that is installed on a hardened machine?
That you will not be able to use it in conjunction with personal firewalls on user's desktop machines.
You will have to give the vendor confidential network information.
You will be required to use the configuration that the vendor assigns you.
That the firewall's vendor may be compromised and your private information may publicly available.
That it may be vulnerable to attacks targeting the underlying Operating System.
In order to perform promiscuous mode captures using the Wireshark capture tool on a Windows Server 2003 machine, what must first be installed?
IPv4 stack
IPv6 stack
WinPcap
Nothing, it will capture by default
At least two network adapters
You have found a user in your organization who has managed to gain access to a system that this user was not granted the right to use. This user has just provided you with a working example of which of the following?
Intrusion
Misuse
Intrusion detection
Misuse detection
Anomaly detection
You have recently been contracted to implement a new firewall solution at a client site. What are the two basic forms firewall implementations?
Chaining
Stateful
DMZ
Stateless
KMZ
You are considering your options for a new firewall deployment. At which two layers of the OSI model does a simple (stateless) packet filtering firewall operate?
Data Link
Application
Session
Presentation
Network
Your organization has extensive resources that you must make available to authorized users, through your ISA Server 2006. From the following answers, select the one that is not a feature of ISA Server Content Publishing:
Secure Sockets Layer (SSL) Bridging
Web Caching and Delivery
Web Publishing Load Balancing
Enhanced Multi-factor Authentication
Robust Logging and Reporting
The exhibit shows a router with three interfaces EO, E1 and SO. Interfaces EO and E1 are connected to internal networks 192.168.10.0 and 192.168.20.0 respectively and interface SO is connected to the Internet. The objective is to allow only network 192.168.20.0 to access e-commerce Web sites on the Internet, while allowing all internal hosts to access resources within the internal network. From the following, select all the access list statements that are required to make this possible.
access-list 113 permit tcp 192.168.20.0 0.0.0.255 any eq 80
access-list 113 permit tcp 192.168.20.0 0.0.0.255 any eq 53
access-list 113 permit tcp 192.168.20.0 0.0.0.255 any eq 443
D. access-list 113 permit tcp 192.168.20.0 0.0.0.255 any It 1023
int SO, ip access-group 113 in
int E1, ip access-group 113 in
int SO, ip access-group 113 out
In your office, you are building the new wireless network, and you will need to install several access points. What do wireless access points use to counter multipath interference?
Multiple encryption algorithms
Multiple Antennas
Multiple radio frequencies
Duplicate packet transfer
Secondary transmissions
One of the firewall choices you are thinking of implementing, in your network, is a proxy server. A proxy server can accomplish which of the following statements?
Cache web pages for increased performance
Operate at the Application layer of the OSI model
Allow direct communication between an internal and external host
Permit or deny traffic based upon type of service
Filter executables that are attached to an e-mail