IT认证考试网

最新SC0-471考试题库

Examsoon最新SC0-471认证真题，真题覆盖率达到90%以上。考不过全额退款保障，让您认证无忧。绝对真实来自Examsoon的高质量题库。

购买SC0-471考试题库请认准Examsoon标志！切勿因贪便宜而造成不必要的损失和遗憾。下载题库及任何SC0-471问题请与我站管理员联系！

SC0-471 考试是 SCP 公司的 Strategic Infrastructure Security 认证考试官方代号，Examsoon的SC0-471权威考试题库软件是SCP认证厂商的授权产品,Examsoon绝对保证第一次参加 SC0-471 考试的考生即可顺利通过，否则承诺全额退款！

选择 Examsoon SC0-471 题库

SC0-471题库购买时请一定要认准Examsoon标志，世界第一IT认证资料服务提供商中国服务中心。

Examsoon
SC0-471学习资料

Examsoon
SC0-471题库，不同于Testiinside SC0-471、certtinside SC0-471、Pass4sideSC0-471、TestkingSC0-471、Pass4sureSC0-471的题库资料，是全球IT认证资料供应力量，以高科技的仿真效果，完全覆盖各类IT认证考试真题，保证您一次性得到最标准的认证真题测试。

Examsoon SC0-471 的优势

1.Examsoon 模拟测试题具有最高的专业技术含量，只供具有相关专业知识的专家和学者学习和研究之用。

2.该测试已取得试题持有者和第三方的授权，我们深信IT业的专业人员和经理人有能力保证被授权产品的质量。

3.如果你使用 Examsoon模拟测试，我们将保证你的第一次参加考试即取得成功，否则，我们将全额退款！

4.提供每种产品免费测试。在您决定购买之前，请检测联接，可能存在的问题及试题质量和适用性。

SC0-471 考试是 SCP 公司的 Strategic Infrastructure Security 认证考试官方代号，Examsoon的 SC0-471 权威考试题库软件是 SCP 认证厂商的授权产品，Examsoon 绝对保证第一次参加 SC0-471考试的考生即可顺利通过，否则承诺全额退款！

Strategic Infrastructure Security 认证作为全球IT领域专家 SCP 热门认证之一，是许多大中IT企业选择人才标准的必备条件。 如果你正在准备 SC0-471 考试，为 SCP Strategic Infrastructure Security认证做最后冲刺，又苦于没有绝对权威的考试真题模拟， Examsoon希望能助你成功。

1、Examsoon考题大师SC0-471试题都是考试原题的完美组合，覆盖率95％以上，答案由多位专业资深讲师原版破解得出，正确率100％，只要您使用本站的考试题库参加SC0-471 考试，我们保证您一次轻松通过考试；

2、售后服务第一！我们相信要想在当今时代取得成功，必须为广大用户提供全套的周到细致的全程优质售后服务，只有客户满意了，我们才能发展。客户至上是我们Examsoon考题大师的一贯宗旨；

3、Examsoon实行“一次不过全额退款”承诺。如果您购买我们SC0-471的考题，只要不是首次通过，凭盖有PROMETRIC或VUE考试中心钢印的考试成绩单，我们将退还您购买SC0-471考题大师的全部费用，绝对保证您的利益不受到任何的损失；

4、本站SC0-471题库根据SC0-471考试的变化动态更新，在厂家考题每次发生变化后，我们承诺2天内更新SC0-471题库。确保SC0-471考题的覆盖率始终都在95％以上；我们提供2种 SC0-471 考题大师版本供你选择。

5、软件版本SC0-471 考试题库
优点：具有学习模式，测试模式，线上自动升级
缺点：仅限固定电脑使用，不可打印为文本，只能PC阅读

6、PDF 格式SC0-471考试题库
优点：不需下载安装软件，方便用户打印和携带，但也带来了可随意制的弊端，因此我们提醒用户不得随意公开或出售本站的SC0-471题库，一经发现立即取消其升级资格，且不予退款。
缺点：不具备测试模式，通过查看Examsoon网站及查收我们的更新E-MAIL获取更新信息。

Examsoon
部分最新免费SC0-471认证题库：（您也可以联系我下载部分最新SC0-471考试题库）

　
　
Exam : SCP SC0-471
Title : Strategic Infrastructure Security

1. What type of cipher is used by an algorithm that encrypts data one bit at a time?
A. 64-bit encryption Cipher
B. Block Cipher
C. Stream Cipher
D. Diffuse Cipher
E. Split Cipher
Answer: C

2. During a one week investigation into the security of your network you work on identifying the information that is leaked to the Internet, either directly or indirectly. One thing you decide to evaluate is the information stored in the Whois lookup of your organizational website. Of the following, what pieces of information can be identified via this method?
A. Registrar
B. Mailing Address
C. Contact Name
D. Record Update
E. Network Addresses (Private)
Answer: ABCD

3. In the process of public key cryptography, which of the following is true?
A. Only the public key is used to encrypt and decrypt
B. Only the private key can encrypt and only the public key can decrypt
C. Only the public key can encrypt and only the private key can decrypt
D. The private key is used to encrypt and decrypt
E. If the public key encrypts, then only the private key can decrypt
Answer: E

4. Recently, you have seen an increase in intrusion attempts and in network traffic. You decide to use Snort to run a packet capture and analyze the traffic that is present. Looking at the example, what type of traffic did Snort capture in this log file?
A. Windows 2000 Ping Request
B. Windows NT 4.0 Ping Request
C. Linux Ping Request
D. Linux Ping Response
E. Windows NT 4.0 Ping Response
Answer: B

5. You are working with some new RPM files on your Linux system. You know there are several options when dealing with RPM files. Which of the following answers lists proper RPM commands, with the correct description of the command?
A. rpm -q <package name> This command performs software verification.
B. rpm -e <package name> This command removes the software.
C. rpm -v <package name> This command performs software verification.
D. rpm -r <package name> This command removes the software.
E. rpm -i <package name> This command installs the software.
F. rpm -in <package name> This command installs the software.
Answer: ABE

6. If you wish to change the permissions of a parent directory in your Linux system, and want the permissions to be changed on the files and subdirectories in the parent directory to be the same, what switch must you use?
A. -G
B. -R
C. -P
D. -S
E. -F
Answer: B

7. What encryption algorithm was selected to replace DES?
A. RC5
B. IDEA
C. AES
D. Blowfish
E. RSA
Answer: C

8. You have become the lead security professional for a mid-sized organization. You are currently studying DNS issues, and configuration options. You come across the concepts of DNS Spoofing, and investigate more. What is DNS Spoofing?
A. DNS Spoofing is when the DNS client submits a false DNS request to the DNS server, and the DNS server responds with correct data.
B. DNS Spoofing is the DNS client submits a DNS request to the DNS server using a bogus IP address, and the DNS server responds to the incorrect host.
C. DNS Spoofing is when a DNS Server responds to an unauthorized DNS client, providing that client with name resolution.
D. DNS Spoofing is when a DNS client is forced to make a DNS query to an imposter DNS server, which send the client to an imposter resource.
E. DNS spoofing is when a DNS server provides name resolution to clients that are located in a different IP subnet than the server itself.
Answer: D

9. To increase the security of your network and systems, it has been decided that EFS will be implemented in the appropriate situations. Two users are working on a common file, and often email this file back and forth between each other. Is this a situation where the use of EFS will create effective security, and why (or why not)?
A. No, the security will remain the same since both users will share the same key for encryption.
B. Yes, since the file will be using two keys for encryption the security will increase.
C. No, the security will remain the same since both users will share the same key for decryption.
D. Yes, since the file will be using two keys for decryption the security will increase.
E. No, EFS cannot be used for files that are shared between users.
Answer: E

10. You have just downloaded a new file, called scnpfile.tar.gz. You are going to verify the file prior to un-archiving the file. Which command do you need to type to un-compress the file, prior to un-archiving?
A. tar xvf scnpfile.tar.gz
B. tar -zxvf scnpfile.tar.gz
C. gunzip scnpfile.tar.gz
D. gunzip -xvf scnpfile.tar.gz
E. gunzip -zxvf scnpfile.tar.gz
Answer: C

11. What is the name of the informational page that is relevant to a particular command in Linux?
A. Readme Page
B. Lnx_nfo Page
C. Man Page
D. X_Win Page
E. Cmd_Doc Page
Answer: C

12. You have just become the senior security professional in your office. After you have taken a complete inventory of the network and resources, you begin to work on planning for a successful security implementation in the network. You are aware of the many tools provided for securing Windows 2003 machines in your network. What is the function of Secedit.exe?
A. This tool is used to set the NTFS security permissions on objects in the domain.
B. This tool is used to create an initial security database for the domain.
C. This tool is used to analyze a large number of computers in a domain-based infrastructure.
D. This tool provides an analysis of the local system NTFS security.
E. This tool provides a single point of management where security options can be applied to a local computer or can be imported to a GPO.
Answer: C

13. In order for your newly written security policy to have any weight, it must be implemented. Which of the following are the three components of a successful Security Policy Implementation in an organization?
A. Policy Monitoring
B. Policy Design
C. Policy Committee
D. Policy Enforcement
E. Policy Documentation
Answer: ABD

14. As per the guidelines in the ISO Security Policy standard, what is the purpose of the section on Physical and Environmental Security?
A. The objectives of this section are to avoid breaches of any criminal or civil law, statutory, regulatory or contractual obligations and of any security requirements, and to ensure compliance of systems with organizational security policies and standards.
B. The objectives of this section are to prevent unauthorized access, damage and interference to business premises and information; to prevent loss, damage or compromise of assets and interruption to business activities; to prevent compromise or theft of information and information processing facilities.
C. The objectives of this section are to provide management direction and support for information security.
D. The objectives of this section are to maintain appropriate protection of corporate assets and to ensure that information assets receive an appropriate level of protection.
E. The objectives of this section are to control access to information, to prevent unauthorized access to information systems, to ensure the protection of networked services, and to prevent unauthorized computer access.
Answer: B

15. To maintain the security of your network you routinely run several checks of the network and computers. Often you use the built-in tools, such as netstat. If you run the following command:
netstat -e
which of the following will be the result?
A. Displays all connections and listening ports
B. Displays Ethernet statistics
C. Displays addresses and port numbers in numerical form
D. Shows connections for the protocol specified
E. Displays per-protocol statistics
Answer: B

16. You are aware of the significance and security risk that Social Engineering plays on your company. Of the following Scenarios, select those that, just as described, represent potentially dangerous Social Engineering:
A. A writer from a local college newspapers calls and speaks to a network administrator. On the call the writer requests an interview about the current trends in technology and offers to invite the administrator to speak at a seminar.
B. An anonymous caller calls and wishes to speak with the receptionist. On the call the caller asks the receptionist the normal business hours that the organization is open to the public.
C. An anonymous caller calls and wishes to speak with the purchaser of IT hardware and software. On the call the caller lists several new products that the purchaser may be interested in evaluating. The caller asks for a time to come and visit to demonstrate the new products.
D. An email, sent by the Vice President of Sales and Marketing, is received by the Help Desk asking to reset the password of the VP of Sales and Marketing.
E. An email is received by the Chief Security Officer (CSO) about a possible upgrade coming from the ISP to a different brand of router. The CSO is asked for the current network’s configuration data and the emailer discusses the method, plan, and expected dates for the rollover to the new equipment.
Answer: DE

17. During the review of the security logs you notice some unusual traffic. It seems that a user has connected to your Web site ten times in the last week, and each time has visited every single page on the site. You are concerned this may be leading up to some sort of attack. What is this user most likely getting ready to do?
A. Mirror the entire web site.
B. Download entire DNS entries.
C. Scan all ports on a web server.
D. Perform a Distributed Denial of Service attack through the Web server.
E. Allow users to log on to the Internet without an ISP.
Answer: A

18. Attackers have the ability to use programs that are able to reveal local passwords by placing some kind of a pointer/cursor over the asterisks in a program’s password field. The reason that such tools can uncover passwords in some Operating Systems is because:
A. the passwords are simply masked with asterisks
B. the etc/passwd file is on a FAT32 partition
C. the passwords are decrypted on screen
D. the password text is stored in ASCII format
E. the etc/passwd file is on a FAT16 partition
Answer: A

19. Which one of the following is an incorrect mod equation?
A. 9 mod 3 = 0
B. 40 mod 10 = 0
C. 40 mod 9 = 4
D. (6-1) mod 3 = 0
E. (2+4) mod 5 = 1
Answer: D

20. What is a problem with symmetric key cryptography?
A. It is slower than asymmetric key cryptography
B. Secure distribution of the public key
C. There is a lack of encryption protocols that can use symmetric key cryptography
D. Secure distribution of a secret key
E. Symmetric key cryptography is reserved for the NSA
Answer: D