Logical Operations CFR-210 Online Practice Questions and Exam Preparation

Logical Operations CFR-210 Online Questions & Answers

• Question 1:

  DRAG DROP

  When perpetrating an attack, there are often a number of phases attackers will undertake, sometimes taking place over a long period of time. Place the following phases in the correct chronological order from first (1) to last (5).

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 2:

  An attacker has exfiltrated the SAM file from a Windows workstation. Which of the following attacks is MOST likely being perpetrated?

  A. user enumeration
  B. Brute forcing
  C. Password sniffing
  D. Hijacking/rooting
  C. Password sniffing

  ---

  Explanation/Reference:

• Question 3:

  A malicious attacker has compromised a database by implementing a Python-based script that will automatically establish an SSH connection daily between the hours of 2:00 am and 5:00 am. Which of the following is the MOST common motive for the attack vector that was used?

  A. Pivoting
  B. Persistence/maintaining access
  C. Exfiltration
  D. Lateral movement
  D. Lateral movement

  ---

  Explanation/Reference:

• Question 4:

  Click the exhibit button. After reviewing captured network traffic logs, a security auditor suspects a violation of the organization's computer use policy. Which of the following is the likely indicator of the violation?

  

  

  A. Unauthorized programs
  B. Malicious software
  C. Service disruption
  D. Registry entries
  E. New user account
  A. Unauthorized programs

  ---

  Explanation/Reference:

• Question 5:

  Which of the following describes pivoting?

  A. Copying captured data to a hacker's system
  B. Performing IP packet inspection
  C. Generating excessive network traffic
  D. Accessing another system from a compromised system
  D. Accessing another system from a compromised system

  ---

  Explanation/Reference:

• Question 6:

  Which of the following types of logs is shown below, and what can be discerned from its contents?

  

  A. Firewall log showing a possible web server attack
  B. Proxy log showing a possible DoS attack
  C. Firewall log showing a possible DoS attack
  D. Proxy log showing a possible web server attack
  C. Firewall log showing a possible DoS attack

  ---

  Explanation/Reference:

• Question 7:

  Which of the following could an attacker use to perpetrate a social engineering attack? (Choose two.)

  A. Keylogger
  B. Yagi
  C. Company uniform
  D. Blackdoor
  E. Phone call
  A. Keylogger
  E. Phone call

  ---

  Explanation/Reference:

• Question 8:

  To redact or obfuscate sensitive data, a company requires its name be changed throughout a port-incident report. Using a Linux sed command, which of the following will replace the company's name with "Acme"?

  A. /Orange/Acme/g
  B. s/Acme/Orange/g
  C. /Acme/Orange/g
  D. s/Orange/Acme/g
  D. s/Orange/Acme/g

  ---

  Explanation/Reference:

• Question 9:

  Which of the following tools can be used to identify open ports and services?

  A. netstat
  B. tcpdump
  C. nmap
  D. recon-ng
  A. netstat

• Question 10:

  When determining the threats/vulnerabilities to migrate, it is important to identify which are applicable.

  Which of the following is the FIRST step to determine applicability?

  A. Review online vulnerability database
  B. Limit and control network ports, protocols, and services.
  C. Continuously assess and remediate vulnerabilities.
  D. Conduct an assessment of the system infrastructure.
  D. Conduct an assessment of the system infrastructure.

  ---

  Explanation/Reference: