CertNexus CertNexus Certification CFR-310 Questions & Answers

• Question 1:

  Which of the following is susceptible to a cache poisoning attack?

  A. Domain Name System (DNS)

  B. Secure Shell (SSH)

  C. Hypertext Transfer Protocol Secure (HTTPS)

  D. Hypertext Transfer Protocol (HTTP)

  Correct Answer: A

  Reference: https://www.sciencedirect.com/topics/computer-science/cache-poisoning-attack

• Question 2:

  Which of the following are common areas of vulnerabilities in a network switch? (Choose two.)

  A. Default port state

  B. Default credentials

  C. Default protocols

  D. Default encryption

  E. Default IP address

  Correct Answer: AB

• Question 3:

  An organization recently suffered a data breach involving a server that had Transmission Control Protocol (TCP) port 1433 inadvertently exposed to the Internet. Which of the following services was vulnerable?

  A. Internet Message Access Protocol (IMAP)

  B. Network Basic Input/Output System (NetBIOS)

  C. Database

  D. Network Time Protocol (NTP)

  Correct Answer: C

  Reference: http://www.princeton.edu/~rblee/ELE572Papers/Fall04Readings/ DDoSSurveyPaper_20030516_Final.pdf (9)

• Question 4:

  An automatic vulnerability scan has been performed. Which is the next step of the vulnerability assessment process?

  A. Hardening the infrastructure

  B. Documenting exceptions

  C. Assessing identified exposures

  D. Generating reports

  Correct Answer: D

  Reference: https://securityintelligence.com/a-step-by-step-guide-to-vulnerability-assessment/

• Question 5:

  While planning a vulnerability assessment on a computer network, which of the following is essential? (Choose two.)

  A. Identifying exposures

  B. Identifying critical assets

  C. Establishing scope

  D. Running scanning tools

  E. Installing antivirus software

  Correct Answer: AC

• Question 6:

  Which of the following attacks involves sending a large amount of spoofed User Datagram Protocol (UDP) traffic to a router's broadcast address within a network?

  A. Land attack

  B. Fraggle attack

  C. Smurf attack

  D. Teardrop attack

  Correct Answer: C

  Reference: https://books.google.com.pk/books?id=rCx5OfSFUPkCandpg=RA7-PA8andlpg=RA7PA8anddq=attacks+involves+sending+a+large+amount+of+spoofed+User+Datagram+Protocol+(UDP) +traffic+to+a+router%E2%80%99s+broadcast +address+within+a +networkandsource=blandots=aKV7j5UIQxandsig=ACfU3U0EkAK3nHXfUCJco5xVhckbtrT68wandhl=enandsa=Xandve d=2ahUKEwjMlPWLz7bpAhUBrxoKHQNyAVoQ6AEwAHoECBUQAQ#v=onepageandq=attacks%20involves % 20sending%20a%20large%20amount%20of%20spoofed%20User%20Datagram%20Protocol%20 (UDP)%20traffic%20to%20a%20router%E2%80%99s%20broadcast%20address%20within%20a% 20networkandf=false

• Question 7:

  The Key Reinstallation Attack (KRACK) vulnerability is specific to which types of devices? (Choose two.)

  A. Wireless router

  B. Switch

  C. Firewall

  D. Access point

  E. Hub

  Correct Answer: AE

  Reference: https://www.kaspersky.com/blog/krackattack/19798/

• Question 8:

  To minimize vulnerability, which steps should an organization take before deploying a new Internet of Things (IoT) device? (Choose two.)

  A. Changing the default password

  B. Updating the device firmware

  C. Setting up new users

  D. Disabling IPv6

  E. Enabling the firewall

  Correct Answer: BE

• Question 9:

  Which of the following are part of the hardening phase of the vulnerability assessment process? (Choose two.)

  A. Installing patches

  B. Updating configurations

  C. Documenting exceptions

  D. Conducting audits

  E. Generating reports

  Correct Answer: AB

• Question 10:

  Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?

  A. Disabling Windows Updates

  B. Disabling Windows Firewall

  C. Enabling Remote Registry

  D. Enabling Remote Desktop

  Correct Answer: D