SCP SC0-402 SCP-NDC Exam Questions Instant Access

Question 1

In your network there is an ISA server running as the firewall. It is a simple design, a single machine with two network cards.

You are configuring the Access Policies on this machine. What is the function of the Protocol Rules section of the Access Policy?

AProtocol Rules either allow or disallow a specific port to the entire network.

BProtocol Rules determine if specified users will be able to access specified content on specified destination computers.

CProtocol Rules determine which protocols can be used to communicate with the Internet.

DProtocol Rules either allow or disallow specific packets destined for specific nodes on the network

EProtocol Rules determine if specific ports are to be accessed by specific subnets in the network.

Answer : C

Question 2

The main reason you have been hired at a company is to bring the network security of the organization up to current standards. A

high priority is to have a full security audit of the network as soon as possible. You have chosen an Operational Audit and are

describing it to your coworkers. Which of the following best describes an Operational audit?

AThis type of audit is typically done by a contracted external team of security experts who check for policy compliance.

BThis type of audit is usually done by internal resources to examine the current daily and on-going activities within a network
system for compliance with an established security policy.

CThis type of audit is typically done by an internal team who ensures the security measures are up to international standards.

DThis type of audit is usually done by the current network administrators who ensure the security measures are up to international
standards.

EThis type of audit is usually conducted by external resources and may be a review or audit of detailed audit logs.

Answer : B

Question 3

You are the firewall administrator at your company and the network administrators have decided to implement a VPN solution

that will use L2TP. Which port or ports would you need to allow through the firewall to allow the L2TP traffic to reach the VPN

server inside your network from a remote client?

ATCP 1723

BUDP 47

CUDP 1701

DTCP 443

EUDP 500

Answer : C

Question 4

You are planning on implementing a token-based authentication system in your network. The network currently is spread out

over four floors of your building. There are plans to add three branch offices. During your research you are analyzing the different

types of systems. Which of the following are the two common systems token-based authentication uses?

AChallenge/Response

BRandom-code

CTime-based

DChallenge/Handshake

EPassword-Synch

Answer : A, C

Question 5

Which of the following is not a feature of CheckPoint's Firewall-1?

AVPN

BReverse IP lookup

CUser Authentication

DMalicious activity detection

EIntrusion detection

Answer : B

Question 6

In your network the decision has been made to implement IPSec. You are determining the encryption that your network will use.

IPSec can use which of the following for message encryption?

AMD5

BSHA-1

C3DES

DCHAP

EDES

Answer : A, B, C, E

Question 7

While configuring your ISS Internet Scanner to run in your network, you have decided to check for a specific Denial of Service

vulnerability that may be present. You have decided to let the users of the network know about the upcoming scan. What is the reason

you would inform all the users of such a scan?

ARunning the scan will tie up local HD space on each user computer, and you need the users to be aware of this.

BRunning the scan will use bandwidth, and you want the users to be prepared.

CRunning the scan will use the CPU cycles on the Main File Servers, and you need the users to be aware of this.

DRunning the scan will use the CPU cycles on each user computer, and you need the users to be aware of this.

ERunning the scan will trigger an alert at the ISP, and they may shutoff your Internet access temporarily.

Answer : B

SCP Network Defense and Countermeasures SC0-402 SCP-NDC Exam Questions