SC0-451 Tactical Perimeter Defense Certified Practice Exam

Sample Questions:

You are concerned about attacks against your network, and have decided to implement some defensive measure on your routers. If you have 3 interfaces, S1, S0, and E0, and you implement the following configuration, what attack will you be defending against? Router# config terminal Router(config)# Interface Ethernet 0 Router(config-if)#no ip directed broadcast Router(config-if)#Interface Serial 0 Router (config-if) #no ip directed broadcast Router(config-if)#Interface Serial 1 Router(config-if)#no ip directed broadcast Router(config)#^Z Router#

Smurf

BO2K

Sub Seven

Any Trojan

Any Worm

You are configuring your new IDS machine, where you have recently installed Snort. While you are working with this machine, you wish to create some basic rules to test the ability to log traffic as you desire. Which of the following Snort rules will log any tcp traffic from any IP address to any port between 1 and 1024 on any host in the 10.0.10.0/24 network?

log tcp 0.0.0.0/24 -> 10.0.10.0/24 1<>1024

log tcp any any -> 10.0.10.0/24 1<>1024

log tcp any any -> 10.0.10.0/24 1:1024

log tcp 0.0.0.0/24 -> 10.0.10.0/24 1:1024

log udp any any -> 10.0.10.0/24 1:1024

You are in the process of configuring your network firewall policy. As you begin building the content of the policy you start to organize the document into sections. Which of the following are sections found in the firewall policy?

The Acceptable Use Statement

The Firewall Administrator Statement

The Network Connection Statement

The Incident Handling Statement

The Escalation Procedures Statement

You have just installed a new Intrusion Detection System in your network. You are concerned that there are functions this system will not be able to perform. What is a reason an IDS cannot manage hardware failures?

The IDS can only manage RAID 5 failures.

The IDS cannot be programmed to receive SNMP alert messages.

The IDS cannot be programmed to receive SNMP trap messages.

The IDS cannot be programmed to respond to hardware failures.

The IDS can only inform you that an event happened.

At a policy meeting you have been given the task of creating the firewall policy. What are the two basic positions you can take when creating the policy?

To deny all traffic and permit only that which is required.

To permit only IP traffic and filter TCP traffic

To permit only TCP traffic and filter IP traffic

To permit all traffic and deny that which is required.

To include your internal IP address as blocked from incoming to prevent spoofing.

Your company has created it's security policy and it's time to get the firewall in place. Your group is trying to decide whether to build a firewall or buy one. What are some of the benefits to purchasing a firewall rather than building one?

They usually have a good management GUI.

They offer good logging and alerting.

You do not need to configure them.

The OS doesn't need to be hardened before installing the vendor's firewall on it.

They often do real time monitoring.