CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 91:

  According to Payment Card Industry Data Security Standard (PCI DSS) compliance requirements, an organization must retain logs for what length of time?

  A. 3 months
  B. 6 months
  C. 1 year
  D. 5 years
  C. 1 year

• Question 92:

  What describes the BEST approach for developing a plan to continuously assess and track vulnerabilities on all organizational assets and infrastructure in order to remediate and minimize the opportunity for attacks?

  A. Establish and maintain a risk-based remediation strategy.
  B. Establish and maintain detailed enterprise asset inventory.
  C. Establish and maintain a data classification scheme.
  D. Establish and maintain a data management process.
  A. Establish and maintain a risk-based remediation strategy.

• Question 93:

  Which part of a proactive approach to system security is responsible for identifying all possible threats to a system to be categorized and analyzed?

  A. Threat assessment
  B. Threat intelligence
  C. Threat modeling
  D. Threat hunting
  C. Threat modeling

• Question 94:

  During which phase of the incident response process should an organization develop policies and procedures for incident handling?

  A. Containment
  B. Preparation
  C. Identification
  D. Recovery
  B. Preparation

• Question 95:

  A security operations center (SOC) analyst observed an unusually high number of login failures on a particular database server. The analyst wants to gather supporting evidence before escalating the observation to management. Which of the following expressions will provide login failure data for 11/24/2015?

  A. grep 20151124 security_log | grep -c "login failure"
  B. grep 20150124 security_log | grep "login_failure"
  C. grep 20151124 security_log | grep "login"
  D. grep 20151124 security_log | grep -c "login"
  C. grep 20151124 security_log | grep "login"

• Question 96:

  What are the two most appropriate binary analysis techniques to use in digital forensics analysis? (Choose two.)

  A. Injection Analysis
  B. Forensic Analysis
  C. Static Analysis
  D. Dynamic Analysis
  C. Static Analysis
  D. Dynamic Analysis

• Question 97:

  During an audit, an organization's ability to establish key performance indicators for its service hosting solution is discovered to be weak. What could be the cause of this?

  A. Improper deployment of the Service-Oriented Architecture
  B. Insufficient Service Level Agreement (SLA)
  C. Absence of a Business Intelligence (Bl) solution
  D. Inadequate Cost Modeling (CM)
  B. Insufficient Service Level Agreement (SLA)

• Question 98:

  A company has noticed a trend of attackers gaining access to corporate mailboxes. Which of the following would be the BEST action to take to plan for this kind of attack in the future?

  A. Scanning email server for vulnerabilities
  B. Conducting security awareness training
  C. Hardening the Microsoft Exchange Server
  D. Auditing account password complexity
  A. Scanning email server for vulnerabilities

• Question 99:

  Which of the following methods are used by attackers to find new ransomware victims? (Choose two.)

  A. Web crawling
  B. Distributed denial of service (DDoS) attack
  C. Password guessing
  D. Phishing
  E. Brute force attack
  D. Phishing
  E. Brute force attack

• Question 100:

  Which of the following technologies would reduce the risk of a successful SQL injection attack?

  A. Reverse proxy
  B. Web application firewall
  C. Stateful firewall
  D. Web content filtering
  B. Web application firewall