CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 111:

  What term means that data is valid and not corrupt?

  A. Confidentiality
  B. Authorization
  C. Integrity
  D. Authentication
  C. Integrity

• Question 112:

  A security administrator is investigating a compromised host. Which of the following commands could the investigator use to display executing processes in real time?

  A. ps
  B. top
  C. nice
  D. pstree
  B. top

• Question 113:

  A system administrator pulls records from a database that only requires the use of their general user vs. domain admin account. Use of the general user account demonstrates which of the following concepts?

  A. Discretionary Access Control
  B. Separation of Duties
  C. Least Privilege
  D. Privileged Access Management
  C. Least Privilege

• Question 114:

  A secretary receives an email from a friend with a picture of a kitten in it. The secretary forwards it to the~COMPANYWIDE mailing list and, shortly thereafter, users across the company receive the following message:

  "You seem tense. Take a deep breath and relax!"

  The incident response team is activated and opens the picture in a virtual machine to test it. After a short analysis, the following code is found in C:

  \Temp\chill.exe:Powershell.exe -Command "do {(for /L %i in (2,1,254) do shutdown /r /m Error! Hyperlink reference not valid.andgt; /f /t / 0 (/c "You seem tense. Take a deep breath and relax!");Start-Sleep -s 900) } while(1)"

  Which of the following BEST represents what the attacker was trying to accomplish?

  A. Taunt the user and then trigger a shutdown every 15 minutes.
  B. Taunt the user and then trigger a reboot every 15 minutes.
  C. Taunt the user and then trigger a shutdown every 900 minutes.
  D. Taunt the user and then trigger a reboot every 900 minutes.
  B. Taunt the user and then trigger a reboot every 15 minutes.

• Question 115:

  ABC Company uses technical compliance tests to verify that its IT systems are configured according to organizational information security policies, standards, and guidelines. Which two tools and controls can ABC Company use to verify that its IT systems are configured accordingly? (Choose two.)

  A. Implementing Automated Key Management Procedures
  B. Implementing Automated Human Resource Procedures
  C. Performing Vulnerability Assessments and Penetration Testing
  D. Implementing Baseline Configuration Security Controls
  C. Performing Vulnerability Assessments and Penetration Testing
  D. Implementing Baseline Configuration Security Controls

• Question 116:

  Which of the following attack vectors capitalizes on a previously undisclosed issue with a software application?

  A. Zero-Day Exploit
  B. Brute Force
  C. Misconfiguration
  D. Ransomware
  E. Phishing
  A. Zero-Day Exploit

• Question 117:

  Which two answer options are the BEST reasons to conduct post-incident reviews after an incident occurs in an organization? (Choose two.)

  A. To help leverage automated scanning tools and ad hoc tests
  B. To help identify lessons learned and follow-up action.
  C. To help identify event detection information.
  D. To help prevent an incident recurrence.
  B. To help identify lessons learned and follow-up action.
  D. To help prevent an incident recurrence.

• Question 118:

  Which of the following is considered a weakness or gap in a security program that can be exploited to gain unauthorized access?

  A. Risk
  B. Threat
  C. Asset
  D. Vulnerability
  D. Vulnerability

• Question 119:

  Which of the following security best practices should a web developer reference when developing a new web- based application?

  A. Control Objectives for Information and Related Technology (COBIT)
  B. Risk Management Framework (RMF)
  C. World Wide Web Consortium (W3C)
  D. Open Web Application Security Project (OWASP)
  D. Open Web Application Security Project (OWASP)

• Question 120:

  An incident responder was asked to analyze malicious traffic. Which of the following tools would be BEST for this?

  A. Hex editor
  B. tcpdump
  C. Wireshark
  D. Snort
  C. Wireshark