Logical Operations CFR-210 Online Practice Questions and Exam Preparation

Logical Operations CFR-210 Online Questions & Answers

• Question 61:

  A hacker's end goal is to target the Chief Financial Officer (CFO) of a bank. Which of the following describes this social engineering tactic?

  A. Vishing
  B. Pharming
  C. Spear phishing
  D. Whaling
  D. Whaling

  ---

  Explanation/Reference:

• Question 62:

  Which of the following can hackers use to gain access to a system over the network without knowing the actual password?

  A. User enumeration
  B. Pass the hash
  C. Port scanning
  D. Password cracking
  D. Password cracking

• Question 63:

  Which of the following resources BEST supports malware analysis?

  A. Internet service providers
  B. Government websites
  C. Crowdsourced intelligence feed
  D. Internal network management team
  C. Crowdsourced intelligence feed

• Question 64:

  Which of the following techniques allows probing firewall rule sets and finding entry points into a targeted system or network?

  A. Distributed checksum clearinghouse
  B. Firewall fingerprinting
  C. Network enumeration
  D. Packet crafting
  D. Packet crafting

• Question 65:

  Which of the following protocols can be used for data extension?

  A. SNMP
  B. DNS
  C. ARP
  D. DHCP
  D. DHCP

  ---

  Explanation/Reference:

• Question 66:

  A security professional has been tasked with the protection of a specific set of information essential to a corporation's livelihood, the exposure of which could cost the company billions of dollars in long-term revenue. The professional is

  interested in obtaining advice for preventing the theft of this type of information.

  Which of the following is the BEST resource for finding this material?

  A. Law enforcement information sharing groups
  B. National Threat Assessment Center
  C. Vendor web pages that provide intelligence feeds and advisories
  D. Blogs concerning the theft of PII
  A. Law enforcement information sharing groups

  ---

  Explanation/Reference:

• Question 67:

  A log file generated from a Windows server was moved to a Linux system for further analysis. A system administrator is now making edits to the file with vi and notices the file contains numerous instances of Ctrl-M (^M) characters. Which of the following command-line tools is the administrator MOST likely to use to remove these characters from the log file? (Choose two.)

  A. tr
  B. cut
  C. cat
  D. unix2dos
  E. awk
  A. tr
  C. cat

  ---

  Explanation/Reference:

• Question 68:

  An organization's firewall has recently been bombarded with an excessive amount of failed requests. A security analyst has been tasked with providing metrics on any failed attempts to ports above 1000. Which of the following regular expressions will work BEST to identify an IP address with the desired port range?

  A. /\b^(?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):({4,5}\d+)\b/
  B. /\b^(?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):([4]\D+)\b/
  C. /\b^(?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):([4]\d+)\b/
  D. /\b^(?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):(\d{1,5})\b/
  C. /\b^(?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}):([4]\d+)\b/

  ---

  Explanation/Reference:

• Question 69:

  An incident responder needs to quickly locate specific data in a large data repository. Which of the following Linux tool should be used?

  A. cat
  B. find
  C. grep
  D. man
  C. grep

  ---

  Explanation/Reference:

• Question 70:

  An intruder gains physical access to a company's headquarters. The intruder is able to access the company's network via a visitor's office. The intruder sets up an attack device, under the visitor's office desk, that impersonates the corporate

  wireless network. Users at headquarters begin to notice slow browsing speeds from their company laptops.

  Which of the following attacks is MOST likely occurring?

  A. Man-in-the-middle
  B. Denial of service
  C. Social engineering
  D. ARP table poisoning
  D. ARP table poisoning

  ---

  Explanation/Reference: