Logical Operations CFR-210 Online Practice Questions and Exam Preparation

Logical Operations CFR-210 Online Questions & Answers

• Question 31:

  Which of the following is the BEST way to capture all network traffic between hosts on a segmented network?

  A. HIPS
  B. Firewall
  C. Router
  D. Protocol analyzer
  A. HIPS

• Question 32:

  A malicious actor sends a crafted email to the office manager using personal information collected from social media. This type of social engineering attack is known as:

  A. spear phishing
  B. vishing
  C. phishing
  D. whaling
  C. phishing

  ---

  Explanation/Reference:

• Question 33:

  During a malware outbreak, a security analyst has been asked to capture network traffic in hourly increments for analysis by the incident response team. Which of the following tcpdump commands would generate hourly pcap files?

  A. tcpdump -nn -i eth0 -w output.pcap -C 100 -W 10
  B. tcpdump -nn -i eth0 -w output.pcap -W 24
  C. tcpdump -nn -i eth0 -w output.pcap -G 3600 -W 14
  D. tcpdump -nn -i eth0 -w output.pcap
  B. tcpdump -nn -i eth0 -w output.pcap -W 24

  ---

  Explanation/Reference:

• Question 34:

  Which of the following is an automated password cracking technique that uses a combination of upper and lower case letters, 0-9 numbers, and special characters?

  A. Dictionary attack
  B. Password guessing
  C. Brute force attack
  D. Rainbow tables
  C. Brute force attack

• Question 35:

  A computer attacker has compromised a system by implanting a script that will send 10B packages over port 150. This port is also used for sending heartbeat messages to a central monitoring server. Which of the following BEST describes the tactic used to execute this attack?

  A. Covert channels
  B. Logic bomb
  C. Backdoors
  D. ICMP redirect
  A. Covert channels

  ---

  Explanation/Reference:

• Question 36:

  An unauthorized network scan may be detected by parsing network sniffer data for:

  A. IP traffic from a single IP address to multiple IP addresses.
  B. IP traffic from a single IP address to a single IP address.
  C. IP traffic from multiple IP addresses to a single IP address.
  D. IP traffic from multiple IP addresses to other networks.
  A. IP traffic from a single IP address to multiple IP addresses.

  ---

  Explanation/Reference:

• Question 37:

  Log review shows that large amounts of data are being sent to an IP address unassociated with the company. Which of the following migration techniques should be implemented?

  A. DNS filtering
  B. System hardening
  C. Proxy
  D. IPS
  A. DNS filtering

  ---

  Explanation/Reference:

• Question 38:

  A company website was hacked via the SQL query below:

  

  Which of the following did the hackers perform?

  A. Cleared tracks [email protected]
  B. Deleted the entirememberstable
  C. Deleted the email password and login details
  D. Performed an XSS attack
  D. Performed an XSS attack

  ---

  Explanation/Reference:

• Question 39:

  An attacker has sent malicious macro-enabled Office files.

  Which of the following regular expressions will return a list of macro-enabled files?

  A. ^.*?\.(?:xls|ppt|doc)m
  B. ^.*(?:xls|ppt|doc)m.*
  C. ^.*?\.(?:xls|ppt|doc)m$
  D. ^.*(?:xls|ppt|doc)m
  B. ^.*(?:xls|ppt|doc)m.*

  ---

  Explanation/Reference:

• Question 40:

  Malicious code that can replicate itself using various techniques is referred to as a:

  A. downloader
  B. rootkit
  C. launcher
  D. worm
  D. worm