SUN 310-301 exam practice questions and answers

The talent is everywhere in modern society. This is doubly true for IT field. With the popularity of the computer, hardly anyone can't use a computer. Working in the IT industry, don't you feel pressure? Educational level is not representative of your strength. Education is just a ticket, however really keeping your status is your strength. As IT staff, how to cultivate your strength? It is a good choice to take IT certification test which can not only help you master more skills, also can get the certificate to prove your ability. Do you want to take SUN 310-301 exam that is very popular in recent?

Add ITCertKing's products to cart now! You will have 100% confidence to participate in the exam and disposably pass SUN certification 310-301 exam. At last, you will not regret your choice.

ITCertKing has gained the reputation of the many certification industry, because we have a lot of high-quality SUN 310-301 Exam 310-301 study guide, 310-301 exam, 310-301 exam answer. As the most professional supplier on the site of IT certification test currently , we provide a comprehensive after-sales service. We provide tracking services to all customers. Within one year of your purchase, enjoy free upgrades examination questions service. During this period, if SUN's 310-301 test questions are modified, We will be free to provide customers with protection. SUN 310-301 certification exam is carefully crafted by our ITCertKing IT experts. With the ITCertKing of SUN 310-301 exam materials, I believe that your tomorrow will be better.

Exam Code: 310-301
Exam Name: SUN (Sun Certified Security Administrator)
One year free update, No help, Full refund!
Total Q&A: 240 Questions and Answers
Last Update: 2013-12-28

ITCertKing is website that can take you access to the road of success. ITCertKing can provide the quickly passing SUN certification 310-301 exam training materials for you, which enable you to grasp the knowledge of the certification exam within a short period of time, and pass SUN certification 310-301 exam for only one-time.

SUN certification 310-301 exam can give you a lot of change. Such as work, life would have greatly improve. Because, after all, 310-301 is a very important certified exam of SUN. But 310-301 exam is not so simple.

310-301 Free Demo Download: http://www.itcertking.com/310-301_exam.html

NO.1 Which threat can be mitigated by setting the Open Boot PROM security mode to full?
A.system panics
B.booting into single user mode
C.remotely accessing the console
D.logging in as root at the console
Correct:B

SUN   310-301   310-301 pdf

NO.2 How do you distinguish between denial of service attacks and programming errors?
A.You cannot make this distinction.
B.You examine the audit events for the process.
C.You verify that the process user ID is that of a valid user.
D.You check the binary against the Solaris Fingerprint Database.
Correct:A

SUN   310-301   310-301 pdf

NO.3 Which two services support TCP Wrappers by default in the Solaris 9 OE? (Choose two.)
A.inetd
B.rpcbind
C.sendmail
D.automountd
E.Solaris Secure Shell
Correct:A E

SUN   310-301   310-301 pdf

NO.4 /var/adm/messages contains this output: Jan 28 21:23:18 mailhost in.telnetd[20911]: [ID 808958
daemon.warning] refused connect from ns.foo.com (access denied) Why was this line generated?
A.A user connecting from ns.foo.com failed to authenticate.
B.The user daemon is not allowed to log in from ns.foo.com.
C.A portscan was run against mailhost from ns.foo.com.
D.The TCP Wrapper configuration does not allow telnet connections from ns.foo.com.
Correct:D

SUN   310-301   310-301 pdf

NO.5 Which two regular user PATH assignments expose the user to a Trojan horse attack? (Choose
two.)
A.PATH=/usr/bin:/bin
B.PATH=/usr/bin:/sbin:/usr/sbin
C.PATH=/usr/bin:/sbin:/usr/sbin:
D.PATH=.:/usr/bin:/sbin:/usr/sbin
Correct:C D

SUN   310-301   310-301 pdf

NO.6 Which evasion technique can NOT be detected by system integrity checks?
A.installing a rootkit
B.adding user accounts
C.abusing an existing user account
D.installing a loadable kernel module
Correct:C

SUN   310-301   310-301 pdf

NO.7 The system administrator finds a Trojaned login command using md5 and the Solaris
Fingerprint Database. What is true about the system administrator's incident response tasks?
A.The server must be rebuilt.
B.BSM will identify the attacker.
C.All other replaced system files can be identified using md5 and the Solaris Fingerprint Database.
D.All other replaced system files can be identified using md5 and the Solaris Fingerprint Database and
replaced with trusted versions.
Correct:A

SUN   310-301   310-301 pdf

NO.8 Which is a public key encryption algorithm?
A.AH
B.AES
C.RSA
D.PGP
E.IDEA
Correct:C

SUN   310-301   310-301 pdf

NO.9 Which command can customize the size for system log file rotation?
A.dmesg
B.logger
C.logadm
D.syslog
E.syslogd
Correct:C

SUN   310-301   310-301 pdf

NO.10 Which syslog facility level specification can be used to record unsuccessful attempts to su(1M)?
A.su.warning
B.cron.debug
C.kernel.alert
D.auth.warning
Correct:D

SUN   310-301   310-301 pdf

NO.11 Which statement about denial of service attack is FALSE?
A.Denial of service is always preventable.
B.Multiple machines may be used as the source of the attack.
C.Service is denied on the victim host when a key resource is consumed.
D.A denial of service attack is an explicit attempt by an attacker to prevent legitimate users of a service
from using that service.
Correct:A

SUN   310-301   310-301 pdf

NO.12 What command loads a DSA identity into a Solaris Secure Shell authentication agent?
A.ssh-add
B.ssh-agent
C.ssh-keyadd
D.ssh-keyload
E.ssh-load-identity
Correct:A

SUN   310-301   310-301 pdf

NO.13 What cryptographic assurance is provided by public key cryptography that is NOT provided by
secret key cryptography?
A.integrity
B.confidentiality
C.authentication
D.non-repudiation
Correct:D

SUN   310-301   310-301 pdf

NO.14 User fred runs a program that consumes all of the system's memory while continuously
spawning a new program. You decide to terminate all of fred's programs to put a stop to this. What
command should you use?
A.kill -u fred
B.pkill -U fred
C.passwd -l fred
D.kill `ps -U fred -o pid`
Correct:B

SUN   310-301   310-301 pdf

NO.15 Click the Exhibit button. Which connection demonstrates that telnet has been denied using TCP
Wrappers?
A.Connection 1
B.Connection 2
C.Connection 3
D.Connection 4
Correct:A

SUN   310-301   310-301 pdf

NO.16 Which setting in the /etc/system file limits the maximum number of user processes to 100 to
prevent a user from executing a fork bomb on a system?
A.set maxuprc = 100
B.set maxusers = 100
C.set user_procs = 100
D.set max_nprocs = 100
Correct:A

SUN   310-301   310-301 pdf

NO.17 Which command generates client key pairs and adds them to the $HOME/.ssh directory?
A.ssh-add
B.ssh-agent
C.ssh-keygen
D.ssh-keyadd
Correct:C

SUN   310-301   310-301 pdf

NO.18 Which is uncharacteristic of a Trojan horse program used to escalate privileges?
A.It is installed in /usr/bin.
B.It is owned by a normal user.
C.It has the same name as a common program.
D.It contains additional functionality which the user does not expect.
Correct:A

SUN   310-301   310-301 pdf

NO.19 Which cryptographic assurances are provided by SSL?
A.confidentiality, integrity, availability
B.authorization, confidentiality, message integrity
C.confidentiality, client authentication, server authentication
D.authentication, confidentiality, access control, non-repudiation
Correct:C

SUN   310-301   310-301 pdf

NO.20 Which two types of host keys are supported by Solaris Secure Shell? (Choose two.)
A.AES
B.RSA
C.DSA
D.DES
E.3DES
Correct:B C

SUN   310-301   310-301 pdf

ITCertKing offer the latest JK0-U21 exam material and high-quality HP2-B102 pdf questions & answers. Our 70-323 VCE testing engine and CUR-009 study guide can help you pass the real exam. High-quality MB6-889 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertking.com/310-301_exam.html