CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 101:

  A digital forensics investigation requires analysis of a compromised system's physical memory. Which of the following tools should the forensics analyst use to complete this task?

  A. Autopsy
  B. FTK
  C. Volatility
  D. Wire shark
  E. CAINE
  C. Volatility

• Question 102:

  Which of the following regulations is most applicable to a public utility provider operating in the United States?

  A. GDPR
  B. NERC
  C. FISMA
  D. HIPAA
  B. NERC

• Question 103:

  Which of the following enables security personnel to have the BEST security incident recovery practices?

  A. Crisis communication plan
  B. Disaster recovery plan
  C. Occupant emergency plan
  D. Incident response plan
  B. Disaster recovery plan

• Question 104:

  A Linux administrator is trying to determine the character count on many log files. Which of the following command and flag combinations should the administrator use?

  A. tr -d
  B. uniq -c
  C. wc -m
  D. grep -c
  C. wc -m

• Question 105:

  Nmap is a tool most commonly used to:

  A. Map a route for war-driving
  B. Determine who is logged onto a host
  C. Perform network and port scanning
  D. Scan web applications
  C. Perform network and port scanning

• Question 106:

  Which of the following types of attackers would be MOST likely to use multiple zero-day exploits executed against high-value, well-defended targets for the purposes of espionage and sabotage?

  A. Cybercriminals
  B. Hacktivists
  C. State-sponsored hackers
  D. Cyberterrorist
  C. State-sponsored hackers

• Question 107:

  A company website was hacked via the following SQL query:

  email, passwd, login_id, full_name FROM members

  WHERE email = "[email protected]"; DROP TABLE members; ?

  Which of the following did the hackers perform?

  A. Cleared tracks of [email protected] entries
  B. Deleted the entire members table
  C. Deleted the email password and login details
  D. Performed a cross-site scripting (XSS) attack
  C. Deleted the email password and login details

• Question 108:

  A common formula used to calculate risk is:+ Threats + Vulnerabilities = Risk. Which of the following represents the missing factor in this formula?

  A. Exploits
  B. Security
  C. Asset
  D. Probability
  C. Asset

• Question 109:

  Which of the following is an essential component of a disaster recovery plan?

  A. Memorandums of agreement with vendors
  B. Product service agreements
  C. A dedicated incident response team
  D. Complete hardware and software inventories
  D. Complete hardware and software inventories

• Question 110:

  A security analyst is required to collect detailed network traffic on a virtual machine. Which of the following tools could the analyst use?

  A. nbtstat
  B. WinDump
  C. fport
  D. netstat
  D. netstat