CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 131:

  Which of the following does the command nmap -open 10.10.10.3 do?

  A. Execute a scan on a single host, returning only open ports.
  B. Execute a scan on a subnet, returning detailed information on open ports.
  C. Execute a scan on a subnet, returning all hosts with open ports.
  D. Execute a scan on a single host, returning open services.
  D. Execute a scan on a single host, returning open services.

• Question 132:

  Which of the following sources is best suited for monitoring threats and vulnerabilities?

  A. QVVASP
  B. CVE
  C. DISA STIG
  D. SANS
  B. CVE

• Question 133:

  While planning a vulnerability assessment on a computer network, which of the following is essential? (Choose two.)

  A. Identifying exposures
  B. Identifying critical assets
  C. Establishing scope
  D. Running scanning tools
  E. Installing antivirus software
  A. Identifying exposures
  C. Establishing scope

• Question 134:

  A network administrator has determined that network performance has degraded due to excessive use of social media and Internet streaming services. Which of the following would be effective for limiting access to these types of services, without completely restricting access to a site?

  A. Whitelisting
  B. Web content filtering
  C. Network segmentation
  D. Blacklisting
  B. Web content filtering

• Question 135:

  A network security analyst has noticed a flood of Simple Mail Transfer Protocol (SMTP) traffic to internal clients. SMTP traffic should only be allowed to email servers. Which of the following commands would stop this attack? (Choose two.)

  A. iptables -A INPUT -p tcp –dport 25 -d x.x.x.x -j ACCEPT
  B. iptables -A INPUT -p tcp –sport 25 -d x.x.x.x -j ACCEPT
  C. iptables -A INPUT -p tcp –dport 25 -j DROP
  D. iptables -A INPUT -p tcp –destination-port 21 -j DROP
  E. iptables -A FORWARD -p tcp –dport 6881:6889 -j DROP
  A. iptables -A INPUT -p tcp –dport 25 -d x.x.x.x -j ACCEPT
  C. iptables -A INPUT -p tcp –dport 25 -j DROP

• Question 136:

  Which asset would be the MOST desirable for a financially motivated attacker to obtain from a health insurance company?

  A. Transaction logs
  B. Intellectual property
  C. PII/PHI
  D. Network architecture
  C. PII/PHI

• Question 137:

  When tracing an attack to the point of origin, which of the following items is critical data to map layer 2 switching?

  A. DNS cache
  B. ARP cache
  C. CAM table
  D. NAT table
  B. ARP cache

• Question 138:

  The statement of applicability (SOA) document forms a fundamental part of which framework?

  A. Generally Accepted Privacy Principles (GAPP)
  B. HIPAA
  C. NIST Privacy Framework
  D. ISO/IEC 27000 series
  D. ISO/IEC 27000 series

• Question 139:

  Which concept involves having more than one person required to complete a task?

  A. Separation of duties
  B. Mandatory access control
  C. Discretionary access control
  D. Least privilege
  A. Separation of duties

• Question 140:

  A government organization responsible for critical infrastructure is being attacked and files on the server been deleted. Which of the following are the most immediate communications that should be made regarding the incident? (Choose two.)

  A. Notifying law enforcement
  B. Notifying the media
  C. Notifying a national compute emergency response team (CERT) or cybersecurity incident response team (CSIRT)
  D. Notifying the relevant vendor
  E. Notifying a mitigation expert
  C. Notifying a national compute emergency response team (CERT) or cybersecurity incident response team (CSIRT)
  E. Notifying a mitigation expert