The latest SUN certification 310-301 exam practice questions and answers

If you are still troubled for the SUN 310-301 certification exam, then select the IT-Tests.com's training materials please. IT-Tests.com's SUN 310-301 exam training materials is the best training materials, this is not doubt. Select it will be your best choice. It can guarantee you 100% pass the exam. Come on, you will be the next best IT experts.

IT-Tests.com provides a clear and superior solutions for each SUN 310-301 exam candidates. We provide you with the SUN 310-301 exam questions and answers. Our team of IT experts is the most experienced and qualified. Our test questions and the answer is almost like the real exam. This is really amazing. More importantly, the examination pass rate of IT-Tests.com is highest in the worldwide.

IT-Tests.com's SUN 310-301 exam training materials not only can save your energy and money, but also can save a lot of time for you. Because the things what our materials have done, you might need a few months to achieve. So what you have to do is use the IT-Tests.com SUN 310-301 exam training materials. And obtain this certificate for yourself. IT-Tests.com will help you to get the knowledge and experience that you need and will provide you with a detailed SUN 310-301 exam objective. So with it, you will pass the exam.

From the view of specialized examination point, it is necessary to teach you tips about the exam. You need to outsmart, and do not give your future the chance of failure. IT-Tests.com is a great resource site. It includes SUN 310-301 Exam Materials, study materials and technical materials, as well as exam training and detailed explanation and answers. The website which provide exam information are surged in recent years. This may cause you clueless when you prepare the SUN 310-301 exam. IT-Tests.com's SUN 310-301 exam training materials are effective training materials that proven by professionals and the candidates who passed the exam. It can help you to pass the exam certification easily.

If you buy the IT-Tests's products, we will not only spare no effort to help you pass the certification exam, but also provide a free update and upgrade service. If the official change the outline of the certification exam, we will notify customers immediately. If we have any updated version of test software, it will be immediately pushed to customers. IT-Tests.com can promise to help you succeed to pass your first SUN certification 310-301 exam.

Exam Code: 310-301
Exam Name: SUN Sun Certified Security Administrator 310-301
Free One year updates to match real exam scenarios, 100% pass and refund Warranty.
Updated: 2013-08-29

310-301 (Sun Certified Security Administrator) Free Demo Download: http://www.it-tests.com/310-301.html

NO.1 Which two regular user PATH assignments expose the user to a Trojan horse attack? (Choose
two.)
A.PATH=/usr/bin:/bin
B.PATH=/usr/bin:/sbin:/usr/sbin
C.PATH=/usr/bin:/sbin:/usr/sbin:
D.PATH=.:/usr/bin:/sbin:/usr/sbin
Correct:C D

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.2 The system administrator finds a Trojaned login command using md5 and the Solaris
Fingerprint Database. What is true about the system administrator's incident response tasks?
A.The server must be rebuilt.
B.BSM will identify the attacker.
C.All other replaced system files can be identified using md5 and the Solaris Fingerprint Database.
D.All other replaced system files can be identified using md5 and the Solaris Fingerprint Database and
replaced with trusted versions.
Correct:A

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.3 Click the Exhibit button. Which connection demonstrates that telnet has been denied using TCP
Wrappers?
A.Connection 1
B.Connection 2
C.Connection 3
D.Connection 4
Correct:A

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.4 Which threat can be mitigated by setting the Open Boot PROM security mode to full?
A.system panics
B.booting into single user mode
C.remotely accessing the console
D.logging in as root at the console
Correct:B

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.5 Which two services support TCP Wrappers by default in the Solaris 9 OE? (Choose two.)
A.inetd
B.rpcbind
C.sendmail
D.automountd
E.Solaris Secure Shell
Correct:A E

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.6 What cryptographic assurance is provided by public key cryptography that is NOT provided by
secret key cryptography?
A.integrity
B.confidentiality
C.authentication
D.non-repudiation
Correct:D

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.7 What command loads a DSA identity into a Solaris Secure Shell authentication agent?
A.ssh-add
B.ssh-agent
C.ssh-keyadd
D.ssh-keyload
E.ssh-load-identity
Correct:A

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.8 Which cryptographic assurances are provided by SSL?
A.confidentiality, integrity, availability
B.authorization, confidentiality, message integrity
C.confidentiality, client authentication, server authentication
D.authentication, confidentiality, access control, non-repudiation
Correct:C

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.9 User fred runs a program that consumes all of the system's memory while continuously
spawning a new program. You decide to terminate all of fred's programs to put a stop to this. What
command should you use?
A.kill -u fred
B.pkill -U fred
C.passwd -l fred
D.kill `ps -U fred -o pid`
Correct:B

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.10 Which syslog facility level specification can be used to record unsuccessful attempts to su(1M)?
A.su.warning
B.cron.debug
C.kernel.alert
D.auth.warning
Correct:D

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.11 Which command generates client key pairs and adds them to the $HOME/.ssh directory?
A.ssh-add
B.ssh-agent
C.ssh-keygen
D.ssh-keyadd
Correct:C

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.12 How do you distinguish between denial of service attacks and programming errors?
A.You cannot make this distinction.
B.You examine the audit events for the process.
C.You verify that the process user ID is that of a valid user.
D.You check the binary against the Solaris Fingerprint Database.
Correct:A

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.13 Which command can customize the size for system log file rotation?
A.dmesg
B.logger
C.logadm
D.syslog
E.syslogd
Correct:C

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.14 Which evasion technique can NOT be detected by system integrity checks?
A.installing a rootkit
B.adding user accounts
C.abusing an existing user account
D.installing a loadable kernel module
Correct:C

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.15 Which is uncharacteristic of a Trojan horse program used to escalate privileges?
A.It is installed in /usr/bin.
B.It is owned by a normal user.
C.It has the same name as a common program.
D.It contains additional functionality which the user does not expect.
Correct:A

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.16 /var/adm/messages contains this output: Jan 28 21:23:18 mailhost in.telnetd[20911]: [ID 808958
daemon.warning] refused connect from ns.foo.com (access denied) Why was this line generated?
A.A user connecting from ns.foo.com failed to authenticate.
B.The user daemon is not allowed to log in from ns.foo.com.
C.A portscan was run against mailhost from ns.foo.com.
D.The TCP Wrapper configuration does not allow telnet connections from ns.foo.com.
Correct:D

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.17 Which setting in the /etc/system file limits the maximum number of user processes to 100 to
prevent a user from executing a fork bomb on a system?
A.set maxuprc = 100
B.set maxusers = 100
C.set user_procs = 100
D.set max_nprocs = 100
Correct:A

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.18 Which statement about denial of service attack is FALSE?
A.Denial of service is always preventable.
B.Multiple machines may be used as the source of the attack.
C.Service is denied on the victim host when a key resource is consumed.
D.A denial of service attack is an explicit attempt by an attacker to prevent legitimate users of a service
from using that service.
Correct:A

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.19 Which two types of host keys are supported by Solaris Secure Shell? (Choose two.)
A.AES
B.RSA
C.DSA
D.DES
E.3DES
Correct:B C

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

NO.20 Which is a public key encryption algorithm?
A.AH
B.AES
C.RSA
D.PGP
E.IDEA
Correct:C

SUN exam simulations   310-301   310-301   310-301 braindump   310-301

We will not only ensure you to pass the exam, but also provide for you a year free update service. If you are not careful to fail to pass the examination, we will full refund to you. However, this possibility is almost not going to happen. We can 100% help you pass the exam, you can download part of practice questions from IT-Tests.com as a free try.