CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 141:

  Which of the following is BEST suited to prevent piggybacking into a sensitive or otherwise restricted area of a facility?

  A. Mantrap
  B. PIN
  C. Biometric controls
  D. ID Card
  A. Mantrap

• Question 142:

  What is the BEST process to identify the vendors that will ensure protection and compliance with security and privacy laws?

  A. Vulnerability assessment
  B. Risk assessment
  C. Penetration testing
  D. Security and privacy review
  B. Risk assessment

• Question 143:

  Which service is commonly found on port 3306?

  A. BitTorrent
  B. MySQL
  C. MS-RPC
  D. Oracle SQL*Net Listener
  B. MySQL

• Question 144:

  Which of the following is the BEST way to prevent social engineering attacks?

  A. Implementing strong physical security.
  B. Training users on a regular basis.
  C. Implementing two-factor access control.
  D. Implementing strict policies and procedures
  B. Training users on a regular basis.

• Question 145:

  Which answer option is a tactic of social engineering in which an attacker engages in an attack performed by phone?

  A. Smishing
  B. Pretexting
  C. Vishing
  D. Phishing
  C. Vishing

• Question 146:

  A company help desk is flooded with calls regarding systems experiencing slow performance and certain Internet sites taking a long time to load or not loading at all. The security operations center (SOC) analysts who receive these calls take the following actions:

  1. Running antivirus scans on the affected user machines

  2. Checking department membership of affected users

  3. Checking the host-based intrusion prevention system (HIPS) console for affected user machine alerts

  4. Checking network monitoring tools for anomalous activities

  Which of the following phases of the incident response process match the actions taken?

  A. Identification
  B. Preparation
  C. Recovery
  D. Containment
  A. Identification

• Question 147:

  If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?

  A. Covering tracks
  B. Expanding access
  C. Gaining persistence
  D. Performing reconnaissance
  A. Covering tracks

• Question 148:

  Which of the following characteristics of a web proxy strengthens cybersecurity? (Choose two.)

  A. Increases browsing speed
  B. Filters unwanted content
  C. Limits direct connection to Internet
  D. Caches frequently-visited websites
  E. Decreases wide area network (WAN) traffic
  A. Increases browsing speed
  D. Caches frequently-visited websites

• Question 149:

  If an organization suspects criminal activity during the response to an incident, when should they notify law enforcement authorities?

  A. After one day of network downtime.
  B. According to a pre-defined cost threshold.
  C. As soon as criminal activity is suspected.
  D. After the criminal activity is confirmed.
  C. As soon as criminal activity is suspected.

• Question 150:

  Which of the following backup strategies will result in the shortest backup time during weekdays and use the least amount of storage space but incur the longest restore time?

  A. Full weekly backup with daily differential backups.
  B. Mirror backups on a daily basis.
  C. Full backups on a daily basis.
  D. Full weekly backup with daily incremental backups.
  D. Full weekly backup with daily incremental backups.