Testpassport E20-322 試験のテーマ

Posts Tagged ‘EX0-107受験’

EX0-107全称はSCNP Stra、　EXIN Inc Certification  EX0-107(SCNP Strategic Infrastructure Security)問題testpassportのITエンジニアとEXIN Inc製品の専門家によって作り上げて、最も新しい本試験題を含めています。この科目は233の本試験の問題です。
EXIN の認定試験について
資格こそ、能力の証です ！
企業の求める情報技術(IT)への要求は、多岐に渡り、ますます厳しいものとなっています。絶え間なく変化し、業績が主導となる環境においては、ITのプロフェッショナルとして信頼性および一貫性のあるITサービスを妥当な価格で提供することが常に要求されます。あなたの知識と能力を証明し、35万人を超える認定ITプロフェッショナルの仲間入りをしましょう。

EXIN (Examination Institute for Information Science) は国際的に展開する独立系のIT試験機関です。EXINは独立した試験および認定方法により、IT分野で活躍するITプロフェッショナルの質の保証を目標とし、教育要件の確立と試験の作成を専門に行っています

以下はTestPassPortのEX0-107のデモです。

http://pdf.testpassport.jp/EX0-107.pdf

1. In the process of public key cryptography, which of the following is true?
A. Only the public key is used to encrypt and decrypt
B. Only the private key can encrypt and only the public key can decrypt
C. Only the public key can encrypt and only the private key can decrypt
D. The private key is used to encrypt and decrypt
E. If the public key encrypts, then only the private key can decrypt
Answer: E
2. As per the guidelines in the ISO Security Policy standard, what is the purpose of the section on
Physical and Environmental Security?
A. The objectives of this section are to avoid breaches of any criminal or civil law, statutory, regulatory or
contractual obligations and of any security requirements, and to ensure compliance of systems with
organizational security policies and standards.
B. The objectives of this section are to prevent unauthorized access, damage and interference to
business premises and information; to prevent loss, damage or compromise of assets and interruption to
business activities; to prevent compromise or theft of information and information processing facilities.
C. The objectives of this section are to provide management direction and support for information
security.
D. The objectives of this section are to maintain appropriate protection of corporate assets and to ensure
that information assets receive an appropriate level of protection.
E. The objectives of this section are to control access to information, to prevent unauthorized access to
information systems, to ensure the protection of networked services, and to prevent unauthorized
computer access.
Answer: B
3. During a one week investigation into the security of your network you work on identifying the
information that is leaked to the Internet, either directly or indirectly. One thing you decide to evaluate is
the information stored in the Whois lookup of your organizational website. Of the following, what pieces of
information can be identified via this method?
A. Registrar
B. Mailing Address
C. Contact Name
D. Record Update
E. Network Addresses (Private)
Answer: ABCD
4. You are aware of the significance and security risk that Social Engineering plays on your company. Of
the following Scenarios, select those that, just as described, represent potentially dangerous Social
Engineering:
A. A writer from a local college newspapers calls and speaks to a network administrator. On the call the
writer requests an interview about the current trends in technology and offers to invite the administrator to
speak at a seminar.
B. An anonymous caller calls and wishes to speak with the receptionist. On the call the caller asks the
receptionist the normal business hours that the organization is open to the public.
C. An anonymous caller calls and wishes to speak with the purchaser of IT hardware and software. On the
call the caller lists several new products that the purchaser may be interested in evaluating. The caller
asks for a time to come and visit to demonstrate the new products.
D. An email, sent by the Vice President of Sales and Marketing, is received by the Help Desk asking to
reset the password of the VP of Sales and Marketing.
E. An email is received by the Chief Security Officer (CSO) about a possible upgrade coming from the ISP
to a different brand of router. The CSO is asked for the current network’s configuration data and the
emailer discusses the method, plan, and expected dates for the rollover to the new equipment.
Answer: DE
5. During the review of the security logs you notice some unusual traffic. It seems that a user has
connected to your Web site ten times in the last week, and each time has visited every single page on the
site. You are concerned this may be leading up to some sort of attack. What is this user most likely getting
ready to do?
A. Mirror the entire web site.
B. Download entire DNS entries.
C. Scan all ports on a web server.
D. Perform a Distributed Denial of Service attack through the Web server.
E. Allow users to log on to the Internet without an ISP.
Answer: A
6. What type of cipher is used by an algorithm that encrypts data one bit at a time?
A. 64-bit encryption Cipher
B. Block Cipher
C. Stream Cipher
D. Diffuse Cipher
E. Split Cipher
Answer: C
7. You have just become the senior security professional in your office. After you have taken a complete
inventory of the network and resources, you begin to work on planning for a successful security
implementation in the network. You are aware of the many tools provided for securing Windows 2003
machines in your network. What is the function of Secedit.exe?
A. This tool is used to set the NTFS security permissions on objects in the domain.
B. This tool is used to create an initial security database for the domain.
C. This tool is used to analyze a large number of computers in a domain-based infrastructure.
D. This tool provides an analysis of the local system NTFS security.
E. This tool provides a single point of management where security options can be applied to a local
computer or can be imported to a GPO.
Answer: C
8. To increase the security of your network and systems, it has been decided that EFS will be
implemented in the appropriate situations. Two users are working on a common file, and often email this
file back and forth between each other. Is this a situation where the use of EFS will create effective
security, and why (or why not)?
A. No, the security will remain the same since both users will share the same key for encryption.
B. Yes, since the file will be using two keys for encryption the security will increase.
C. No, the security will remain the same since both users will share the same key for decryption.
D. Yes, since the file will be using two keys for decryption the security will increase.
E. No, EFS cannot be used for files that are shared between users.
Answer: E