2014年2月4日星期二

The Best SUN 310-301 exam practice questions and answers

While most people would think passing SUN certification 310-301 exam is difficult. However, if you choose ITCertKing, you will find gaining SUN certification 310-301 exam certificate is not so difficult. ITCertKing training tool is very comprehensive and includes online services and after-sales service. Professional research data is our online service and it contains simulation training examination and practice questions and answers about SUN certification 310-301 exam. ITCertKing's after-sales service is not only to provide the latest exam practice questions and answers and dynamic news about SUN 310-301 certification, but also constantly updated exam practice questions and answers and binding.

ITCertKing is a convenient website to provide training resources for IT professionals to participate in the certification exam. ITCertKing have different training methods and training courses for different candidates. With these ITCertKing's targeted training, the candidates can pass the exam much easier. A lot of people who participate in the IT professional certification exam was to use ITCertKing's practice questions and answers to pass the exam, so ITCertKing got a high reputation in the IT industry.

The person who has been able to succeed is because that he believed he can do it. ITCertKing is able to help each IT person, because it has the capability. ITCertKing SUN 310-301 exam training materials can help you to pass the exam. Any restrictions start from your own heart, if you want to pass the SUN 310-301 examination, you will choose the ITCertKing.

ITCertKing provide you with the most authoritative and the fullest SUN 310-301 exam dumps, thus the hit rate is very high. All questions that may appear in the exam are included in our exam dumps. With the changes of exam outline, we also update our exam dumps at any time. ITCertKing pdf real questions and answers can prevent you from wasting lots of time and efforts on preparing for the exam and can help you sail through you exam with ease and high efficiency. But even you fail the exam, we assure we will give you FULL REFUND. Opportunities always for those who are well prepared and we wish you not to miss the good opportunities.

In order to allow you to safely choose ITCertKing, part of the best SUN certification 310-301 exam materials provided online, you can try to free download to determine our reliability. We can not only help you pass the exam once for all, but also can help you save a lot of valuable time and effort. ITCertKing can provide you with the real SUN certification 310-301 exam practice questions and answers to ensure you 100% pass the exam. When having passed SUN certification 310-301 exam your status in the IT area will be greatly improved and your prospect will be good.

ITCertKing has a huge team of IT experts, who continue to use their knowledge and experience to study a lot of IT certification examination papers of past few years. Their findings of the research is now the product of ITCertKing, therefore ITCertKing's SUN 310-301 practice questions are very similar with the real exam, which can help a lot of people to realize their dreams. ITCertKing can ensure you to successfully pass the exam, and you can boldly Add ITCertKing's products to your shopping cart. With ITCertKing your dreams can be achieved immediately.

Exam Code: 310-301
Exam Name: SUN (Sun Certified Security Administrator)
One year free update, No help, Full refund!
Total Q&A: 240 Questions and Answers
Last Update: 2014-02-04

If you buy ITCertKing exam dumps, you will obtain free update for a year. Once the dumps update, ITCertKing will immediately send the latest certification training materials to your mailbox. You can also request we provide you with the latest dumps at any time. If you want to know the latest exam questions, even if you have passed the certification test, ITCertKing will also free update exam dumps for you.

310-301 Free Demo Download: http://www.itcertking.com/310-301_exam.html

NO.1 Which command can customize the size for system log file rotation?
A.dmesg
B.logger
C.logadm
D.syslog
E.syslogd
Correct:C

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.2 Which command generates client key pairs and adds them to the $HOME/.ssh directory?
A.ssh-add
B.ssh-agent
C.ssh-keygen
D.ssh-keyadd
Correct:C

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.3 Which is uncharacteristic of a Trojan horse program used to escalate privileges?
A.It is installed in /usr/bin.
B.It is owned by a normal user.
C.It has the same name as a common program.
D.It contains additional functionality which the user does not expect.
Correct:A

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.4 User fred runs a program that consumes all of the system's memory while continuously
spawning a new program. You decide to terminate all of fred's programs to put a stop to this. What
command should you use?
A.kill -u fred
B.pkill -U fred
C.passwd -l fred
D.kill `ps -U fred -o pid`
Correct:B

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.5 Which two services support TCP Wrappers by default in the Solaris 9 OE? (Choose two.)
A.inetd
B.rpcbind
C.sendmail
D.automountd
E.Solaris Secure Shell
Correct:A E

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.6 Which threat can be mitigated by setting the Open Boot PROM security mode to full?
A.system panics
B.booting into single user mode
C.remotely accessing the console
D.logging in as root at the console
Correct:B

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.7 How do you distinguish between denial of service attacks and programming errors?
A.You cannot make this distinction.
B.You examine the audit events for the process.
C.You verify that the process user ID is that of a valid user.
D.You check the binary against the Solaris Fingerprint Database.
Correct:A

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.8 The system administrator finds a Trojaned login command using md5 and the Solaris
Fingerprint Database. What is true about the system administrator's incident response tasks?
A.The server must be rebuilt.
B.BSM will identify the attacker.
C.All other replaced system files can be identified using md5 and the Solaris Fingerprint Database.
D.All other replaced system files can be identified using md5 and the Solaris Fingerprint Database and
replaced with trusted versions.
Correct:A

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.9 Which two regular user PATH assignments expose the user to a Trojan horse attack? (Choose
two.)
A.PATH=/usr/bin:/bin
B.PATH=/usr/bin:/sbin:/usr/sbin
C.PATH=/usr/bin:/sbin:/usr/sbin:
D.PATH=.:/usr/bin:/sbin:/usr/sbin
Correct:C D

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.10 Which setting in the /etc/system file limits the maximum number of user processes to 100 to
prevent a user from executing a fork bomb on a system?
A.set maxuprc = 100
B.set maxusers = 100
C.set user_procs = 100
D.set max_nprocs = 100
Correct:A

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.11 Which is a public key encryption algorithm?
A.AH
B.AES
C.RSA
D.PGP
E.IDEA
Correct:C

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.12 What cryptographic assurance is provided by public key cryptography that is NOT provided by
secret key cryptography?
A.integrity
B.confidentiality
C.authentication
D.non-repudiation
Correct:D

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.13 Which statement about denial of service attack is FALSE?
A.Denial of service is always preventable.
B.Multiple machines may be used as the source of the attack.
C.Service is denied on the victim host when a key resource is consumed.
D.A denial of service attack is an explicit attempt by an attacker to prevent legitimate users of a service
from using that service.
Correct:A

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.14 /var/adm/messages contains this output: Jan 28 21:23:18 mailhost in.telnetd[20911]: [ID 808958
daemon.warning] refused connect from ns.foo.com (access denied) Why was this line generated?
A.A user connecting from ns.foo.com failed to authenticate.
B.The user daemon is not allowed to log in from ns.foo.com.
C.A portscan was run against mailhost from ns.foo.com.
D.The TCP Wrapper configuration does not allow telnet connections from ns.foo.com.
Correct:D

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.15 What command loads a DSA identity into a Solaris Secure Shell authentication agent?
A.ssh-add
B.ssh-agent
C.ssh-keyadd
D.ssh-keyload
E.ssh-load-identity
Correct:A

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.16 Which two types of host keys are supported by Solaris Secure Shell? (Choose two.)
A.AES
B.RSA
C.DSA
D.DES
E.3DES
Correct:B C

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.17 Click the Exhibit button. Which connection demonstrates that telnet has been denied using TCP
Wrappers?
A.Connection 1
B.Connection 2
C.Connection 3
D.Connection 4
Correct:A

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.18 Which evasion technique can NOT be detected by system integrity checks?
A.installing a rootkit
B.adding user accounts
C.abusing an existing user account
D.installing a loadable kernel module
Correct:C

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.19 Which cryptographic assurances are provided by SSL?
A.confidentiality, integrity, availability
B.authorization, confidentiality, message integrity
C.confidentiality, client authentication, server authentication
D.authentication, confidentiality, access control, non-repudiation
Correct:C

SUN   310-301   310-301   310-301   310-301 answers real questions

NO.20 Which syslog facility level specification can be used to record unsuccessful attempts to su(1M)?
A.su.warning
B.cron.debug
C.kernel.alert
D.auth.warning
Correct:D

SUN   310-301   310-301   310-301   310-301 answers real questions

ITCertKing offer the latest JN0-533 exam material and high-quality MB5-700 pdf questions & answers. Our 700-101 VCE testing engine and HP2-E58 study guide can help you pass the real exam. High-quality 70-321 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/310-301_exam.html

没有评论:

发表评论