CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 121:

  A system administrator identifies unusual network traffic from outside the local network. Which of the following is the BEST method for mitigating the threat?

  A. Malware scanning
  B. Port blocking
  C. Packet capturing
  D. Content filtering
  C. Packet capturing

• Question 122:

  Which two mitigation strategies can prevent an attack delivered via malware? (Choose two.)

  A. Daily backups
  B. Raising user awareness
  C. Implementing IDS
  D. Application patching
  E. Multi-factor authentication
  B. Raising user awareness
  D. Application patching

• Question 123:

  Which of the following is a cybersecurity solution for insider threats to strengthen information protection?

  A. Web proxy
  B. Data loss prevention (DLP)
  C. Anti-malware
  D. Intrusion detection system (IDS)
  B. Data loss prevention (DLP)

• Question 124:

  Which of the following are components of Security Content Automation Protocol (SCAP)?

  A. CVM, NVD, and OSVDB
  B. CVE, CVSS, and OSVDB
  C. CVE, CVSS, and OVAL
  D. CWE, CWSS, and OVAL
  C. CVE, CVSS, and OVAL

• Question 125:

  When reviewing log files from a recent incident, the response team discovers that most of the network-based indicators are IP-based. It would be helpful to the response team if they could resolve those IP-based indicators to hostnames. Which of the following is BEST suited for this task?

  A. DNS
  B. RIP
  C. WINS
  D. NTP
  E. NFS
  A. DNS

• Question 126:

  Which three disk image formats are used for evidence collection and preservation? (Choose three.)

  A. RAW(DD)
  B. E01
  C. AFF
  D. APFS
  E. EXT4
  A. RAW(DD)
  B. E01
  C. AFF

• Question 127:

  Recently, a cybersecurity research lab discovered that there is a hacking group focused on hacking into the computers of financial executives in Company A to sell the exfiltrated information to Company

  B. Which of the following threat motives does this MOST likely represent?

  A. Desire for power
  B. Association/affiliation
  C. Reputation/recognition
  D. Desire for financial gain
  D. Desire for financial gain

• Question 128:

  Which encryption technology was built into Mac OS X?

  A. VeraCrypt
  B. FileVault
  C. LUKS
  D. Bitlocker
  B. FileVault

• Question 129:

  Organizations considered "covered entities" are required to adhere to which compliance requirement?

  A. Health Insurance Portability and Accountability Act of 1996 (HIPAA)
  B. Payment Card Industry Data Security Standard (PCI DSS)
  C. Sarbanes-Oxley Act (SOX)
  D. International Organization for Standardization (ISO) 27001
  A. Health Insurance Portability and Accountability Act of 1996 (HIPAA)

• Question 130:

  The Key Reinstallation Attack (KRACK) vulnerability is specific to which types of devices? (Choose two.)

  A. Wireless router
  B. Switch
  C. Firewall
  D. Access point
  E. Hub
  A. Wireless router
  E. Hub