SC0-471 Exam Details

1.0 Analyzing Packet Structures (5%)
1.1 – Describe the Concepts of Signatures Analysis
1.2 – Examine the Common Vulnerabilities and Exposures (CVE)
1.3 – Examine Normal Network Traffic Signatures
1.4 – Examine Abnormal Network Traffic Signatures


2.0 Creating Security Policies (5%)
2.1 – Examine the Concepts of Security Policies
2.2 – Identify Security Policy Categories
2.3 – Define Incident Handling Procedures


3.0 Performing Risk Analysis (5%)
3.1 – Examine the Concepts of Risk Analysis
3.2 – Define the Methods of Risk Analysis
3.3 – Describe the Process of Risk Analysis
3.4 – Examine Techniques to Minimize Risk


4.0 Ethical Hacking Techniques (10%)
4.1 – Perform Network Scanning and Discovery
4.2 – Describe Network Viruses, Trojans, and Worms
4.3 – Examine Social Engineering
4.4 – Describe Privilege Escalation
4.5 – Examine the Concepts of Denial of Service
4.6 – Exploiting Password Weaknesses


5.0 Internet and WWW Security (15%)
5.1 – Identify and Define the Weak Points in the Structure of the Internet
5.2 – Define Web Site Attack Techniques
5.3 – Define Attack Techniques of Web Users
5.4 – Hardening Web Servers
5.5 – Hardening DNS Servers


6.0 Cryptography (20%)
6.1 – Historical Cryptography
6.2 – Cryptographic Algorithms
6.3 – Private Key Exchange
6.4 – Public Key Exchange
6.5 – Message Authentication


7.0 Hardening Linux Computers (20%)
7.1 – Linux Filesystem and Navigation
7.2 – Secure System Management
7.3 – User and Filesystem Security Administration
7.4 – Secure Network Communications
7.5 – Security Scripting
7.6 – Linux Security Tools

8.0 Hardening Windows Server 2003 (20%)
8.1 – Windows Server 2003 Infrastructure Security
8.2 – Examine Windows Server 2003 Authentication
8.3 – Implement Windows Server 2003 Security Configuration Tools
8.4 – Configure Windows Server 2003 Resource Security
8.5 – Configure Windows Server 2003 Auditing and Logging
8.6 – Configure Windows Server 2003 Network Security


Note: All percentages are approximate and are subject to change at any time. The exam will be updated every year to ensure that the candidate’s knowledge remains current and updated. In the event that significant changes are made at the yearly update, the SCP website will announce these changes.