SCP SC0-402 SCP-NDC Exam Questions Instant Access

Question 1

You have been asked to design and implement a VPN solution to securely connect your home office Seattle, to your eight branch

offices distributed throughout the Pacific Northwest. Your networks use several protocols for connectivity. Migrating all the offices to

a TCP/IP only network is not an option. As such you will have to work around this protocol issue when deciding how to implement

your VPN. What protocols are you allowed to use over L2TP?

AApple-Xmit

BIP

CIPX

DNetBEUI

ER-TRIP

Answer : B, C, D

Question 2

As part of your ongoing intrusion detection project in your network, you are configuring a customized Snort machine. You want

to be sure you use Snort to its maximum abilities, checking as many protocols as it can. What are the protocols that Snort supports?

AICMP

BTCP

CL2TP

DUDP

EIGMP

FPPTP

GIP

Answer : A, B, D, G

Question 3

What are the two primary tunneling protocols that Microsoft's Windows 2000 server will support?

ADES

BPPTP

C3DES

DL2TP

EIPSec

Answer : B, D

Question 4

As you increase the layers of security in your organization, you must watch the network behavior closely. How can a firewall have

a negative impact on the performance of your network?

AIt can authorize sensitive information from the wrong host

BIt can block needed traffic

CIt can decrypt secure communications that were supposed to get past the firewall encrypted

DIt can restrict bandwidth based on QoS

EIt can filter packets that contain virus signatures

Answer : B

Question 5

Your network has had several bad virus attacks in the last few months. Your assistant suggests a new firewall to address this

problem. Which of the following will be an accurate explanation to your assistant as to why this will not have the desired effect he or

she is expecting?

ABecause viruses do not have identifiable signatures like most other network traffic.

BBecause viruses are transmitted host-to-host inside the network, not through firewalls, they need to be found and filtered by an IDS.

CBecause new viruses are constantly being created and if the firewall's engine had to keep up with all the new ones, it would quickly
become over taxed and hinder network performance.

DBecause viruses are usually transferred via email, and email traffic does not get filtered though the firewall.

EBecause new viruses are constantly being created and some could slip through your firewall before the firewall's inspection engine
can be updated.

Answer : E

Question 6

The main reason you have been hired at a company is to bring the network security of the organization up to current standards. A

high priority is to have a full security audit of the network as soon as possible. You have chosen an Operational Audit and are

describing it to your coworkers. Which of the following best describes an Operational audit?

AThis type of audit is typically done by a contracted external team of security experts who check for policy compliance.

BThis type of audit is usually done by internal resources to examine the current daily and on-going activities within a network
system for compliance with an established security policy.

CThis type of audit is typically done by an internal team who ensures the security measures are up to international standards.

DThis type of audit is usually done by the current network administrators who ensure the security measures are up to international
standards.

EThis type of audit is usually conducted by external resources and may be a review or audit of detailed audit logs.

Answer : B

Question 7

During your setup of ISA you know that there is an interface which you don't want ISA to filter, how do you make sure ISA will

ignore traffic for the interface?

AMake sure the interface is not listed in the Network Configuration Options

BMake sure the interface is not listed in the LDT during install

CMake sure the interface does not have Protocol Rule blocking it

DMake sure the interface is not selected in the LAT during the install

EMake sure the interface does not have a Site and Content Rule blocking it

Answer : D

SCP Network Defense and Countermeasures SC0-402 SCP-NDC Exam Questions