2013年11月23日星期六

SUN certification 310-301 best exam questions and answers

ITCertKing is a professional website to specially provide training tools for IT certification exams and a good choice to help you pass 310-301 exam,too. ITCertKing provide exam materials about 310-301 certification exam for you to consolidate learning opportunities. ITCertKing will provide all the latest and accurate exam practice questions and answers for the staff to participate in 310-301 certification exam.

ITCertKing is a specialized IT certification exam training website which provide you the targeted exercises and current exams. We focus on the popular SUN certification 310-301 exam and has studied out the latest training programs about SUN certification 310-301 exam, which can meet the needs of many people. SUN 310-301 certification is a reference of many well-known IT companies to hire IT employee. So this certification exam is very popular now. ITCertKing is also recognized and relied by many people. ITCertKing can help a lot of people achieve their dream. If you choose ITCertKing, but you do not successfully pass the examination, ITCertKing will give you a full refund.

ITCertKing's SUN 310-301 exam training materials not only can save your energy and money, but also can save a lot of time for you. Because the things what our materials have done, you might need a few months to achieve. So what you have to do is use the ITCertKing SUN 310-301 exam training materials. And obtain this certificate for yourself. ITCertKing will help you to get the knowledge and experience that you need and will provide you with a detailed SUN 310-301 exam objective. So with it, you will pass the exam.

ITCertKing's products can not only help customers 100% pass their first time to attend SUN certification 310-301 exam, but also provide a one-year of free online update service for them, which will delivery the latest exam materials to customers at the first time to let them know the latest certification exam information. So ITCertKing is a very good website which not only provide good quality products, but also a good after-sales service.

ITCertKing's training product for SUN certification 310-301 exam includes simulation test and the current examination. On Internet you can also see a few websites to provide you the relevant training, but after compare them with us, you will find that ITCertKing's training about SUN certification 310-301 exam not only have more pertinence for the exam and higher quality, but also more comprehensive content.

Exam Code: 310-301
Exam Name: SUN (Sun Certified Security Administrator)
One year free update, No help, Full refund!
Total Q&A: 240 Questions and Answers
Last Update: 2013-11-23

ITCertKing SUN 310-301 exam training materials have the best price value. Compared to many others training materials, ITCertKing's SUN 310-301 exam training materials are the best. If you need IT exam training materials, if you do not choose ITCertKing's SUN 310-301 exam training materials, you will regret forever. Select ITCertKing's SUN 310-301 exam training materials, you will benefit from it last a lifetime.

SUN 310-301 exam materials of ITCertKing is devoloped in accordance with the latest syllabus. At the same time, we also constantly upgrade our training materials. So our exam training materials is simulated with the practical exam. So that the pass rate of ITCertKing is very high. It is an undeniable fact. Through this we can know that ITCertKing SUN 310-301 exam training materials can brought help to the candidates. And our price is absolutely reasonable and suitable for each of the candidates who participating in the IT certification exams.

310-301 Free Demo Download: http://www.itcertking.com/310-301_exam.html

NO.1 Which two regular user PATH assignments expose the user to a Trojan horse attack? (Choose
two.)
A.PATH=/usr/bin:/bin
B.PATH=/usr/bin:/sbin:/usr/sbin
C.PATH=/usr/bin:/sbin:/usr/sbin:
D.PATH=.:/usr/bin:/sbin:/usr/sbin
Correct:C D

SUN exam prep   310-301 test questions   310-301 study guide

NO.2 Click the Exhibit button. Which connection demonstrates that telnet has been denied using TCP
Wrappers?
A.Connection 1
B.Connection 2
C.Connection 3
D.Connection 4
Correct:A

SUN exam prep   310-301 test questions   310-301 study guide

NO.3 The system administrator finds a Trojaned login command using md5 and the Solaris
Fingerprint Database. What is true about the system administrator's incident response tasks?
A.The server must be rebuilt.
B.BSM will identify the attacker.
C.All other replaced system files can be identified using md5 and the Solaris Fingerprint Database.
D.All other replaced system files can be identified using md5 and the Solaris Fingerprint Database and
replaced with trusted versions.
Correct:A

SUN exam prep   310-301 test questions   310-301 study guide

NO.4 Which cryptographic assurances are provided by SSL?
A.confidentiality, integrity, availability
B.authorization, confidentiality, message integrity
C.confidentiality, client authentication, server authentication
D.authentication, confidentiality, access control, non-repudiation
Correct:C

SUN exam prep   310-301 test questions   310-301 study guide

NO.5 User fred runs a program that consumes all of the system's memory while continuously
spawning a new program. You decide to terminate all of fred's programs to put a stop to this. What
command should you use?
A.kill -u fred
B.pkill -U fred
C.passwd -l fred
D.kill `ps -U fred -o pid`
Correct:B

SUN exam prep   310-301 test questions   310-301 study guide

NO.6 How do you distinguish between denial of service attacks and programming errors?
A.You cannot make this distinction.
B.You examine the audit events for the process.
C.You verify that the process user ID is that of a valid user.
D.You check the binary against the Solaris Fingerprint Database.
Correct:A

SUN exam prep   310-301 test questions   310-301 study guide

NO.7 Which is uncharacteristic of a Trojan horse program used to escalate privileges?
A.It is installed in /usr/bin.
B.It is owned by a normal user.
C.It has the same name as a common program.
D.It contains additional functionality which the user does not expect.
Correct:A

SUN exam prep   310-301 test questions   310-301 study guide

NO.8 Which evasion technique can NOT be detected by system integrity checks?
A.installing a rootkit
B.adding user accounts
C.abusing an existing user account
D.installing a loadable kernel module
Correct:C

SUN exam prep   310-301 test questions   310-301 study guide

NO.9 /var/adm/messages contains this output: Jan 28 21:23:18 mailhost in.telnetd[20911]: [ID 808958
daemon.warning] refused connect from ns.foo.com (access denied) Why was this line generated?
A.A user connecting from ns.foo.com failed to authenticate.
B.The user daemon is not allowed to log in from ns.foo.com.
C.A portscan was run against mailhost from ns.foo.com.
D.The TCP Wrapper configuration does not allow telnet connections from ns.foo.com.
Correct:D

SUN exam prep   310-301 test questions   310-301 study guide

NO.10 Which setting in the /etc/system file limits the maximum number of user processes to 100 to
prevent a user from executing a fork bomb on a system?
A.set maxuprc = 100
B.set maxusers = 100
C.set user_procs = 100
D.set max_nprocs = 100
Correct:A

SUN exam prep   310-301 test questions   310-301 study guide

NO.11 Which two types of host keys are supported by Solaris Secure Shell? (Choose two.)
A.AES
B.RSA
C.DSA
D.DES
E.3DES
Correct:B C

SUN exam prep   310-301 test questions   310-301 study guide

NO.12 What cryptographic assurance is provided by public key cryptography that is NOT provided by
secret key cryptography?
A.integrity
B.confidentiality
C.authentication
D.non-repudiation
Correct:D

SUN exam prep   310-301 test questions   310-301 study guide

NO.13 What command loads a DSA identity into a Solaris Secure Shell authentication agent?
A.ssh-add
B.ssh-agent
C.ssh-keyadd
D.ssh-keyload
E.ssh-load-identity
Correct:A

SUN exam prep   310-301 test questions   310-301 study guide

NO.14 Which statement about denial of service attack is FALSE?
A.Denial of service is always preventable.
B.Multiple machines may be used as the source of the attack.
C.Service is denied on the victim host when a key resource is consumed.
D.A denial of service attack is an explicit attempt by an attacker to prevent legitimate users of a service
from using that service.
Correct:A

SUN exam prep   310-301 test questions   310-301 study guide

NO.15 Which command generates client key pairs and adds them to the $HOME/.ssh directory?
A.ssh-add
B.ssh-agent
C.ssh-keygen
D.ssh-keyadd
Correct:C

SUN exam prep   310-301 test questions   310-301 study guide

NO.16 Which two services support TCP Wrappers by default in the Solaris 9 OE? (Choose two.)
A.inetd
B.rpcbind
C.sendmail
D.automountd
E.Solaris Secure Shell
Correct:A E

SUN exam prep   310-301 test questions   310-301 study guide

NO.17 Which threat can be mitigated by setting the Open Boot PROM security mode to full?
A.system panics
B.booting into single user mode
C.remotely accessing the console
D.logging in as root at the console
Correct:B

SUN exam prep   310-301 test questions   310-301 study guide

NO.18 Which syslog facility level specification can be used to record unsuccessful attempts to su(1M)?
A.su.warning
B.cron.debug
C.kernel.alert
D.auth.warning
Correct:D

SUN exam prep   310-301 test questions   310-301 study guide

NO.19 Which command can customize the size for system log file rotation?
A.dmesg
B.logger
C.logadm
D.syslog
E.syslogd
Correct:C

SUN exam prep   310-301 test questions   310-301 study guide

NO.20 Which is a public key encryption algorithm?
A.AH
B.AES
C.RSA
D.PGP
E.IDEA
Correct:C

SUN exam prep   310-301 test questions   310-301 study guide

ITCertKing offer the latest 1z0-465 exam material and high-quality 000-129 pdf questions & answers. Our NS0-156 VCE testing engine and MB7-701 study guide can help you pass the real exam. High-quality 70-465 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/310-301_exam.html

没有评论:

发表评论