CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 151:

  An organization that recently suffered a ransomware attack found that its backups were faulty. Which of the following steps could BEST ensure reliable backups in the future?

  A. Storing backups at an offsite location.
  B. Implementing periodic tests of backups.
  C. Backing up all data to solid-state storage.
  D. Conducting a full asset inventory assessment.
  B. Implementing periodic tests of backups.

• Question 152:

  A security administrator needs to review events from different systems located worldwide.

  Which of the following is MOST important to ensure that logs can be effectively correlated?

  A. Logs should be synchronized to their local time zone.
  B. Logs should be synchronized to a common, predefined time source.
  C. Logs should contain the username of the user performing the action.
  D. Logs should include the physical location of the action performed.
  A. Logs should be synchronized to their local time zone.

• Question 153:

  An organization wants to deploy a network security tool to alert them but not block malicious activity and network traffic. Which of the following tools would BEST meet the organization's needs?

  A. IPS
  B. IDS
  C. Firewall
  D. EDR
  B. IDS

• Question 154:

  Malicious code designed to execute in concurrence with a particular event is BEST defined as which of the following?

  A. Logic bomb
  B. Rootkit
  C. Trojan
  D. Backdoor
  A. Logic bomb

• Question 155:

  Which of the following represents a front-end security capability that addresses cyber resiliency?

  A. Multi-factor authentication
  B. Immutability of backups
  C. Key management
  D. Physical separation of backups
  A. Multi-factor authentication

• Question 156:

  After a security breach, a security consultant is hired to perform a vulnerability assessment for a company's web application. Which of the following tools would the consultant use?

  A. Nikto
  B. Kismet
  C. tcpdump
  D. Hydra
  A. Nikto

• Question 157:

  The NIST framework 800-137 breaks down the concept of continuous monitoring into which system of tiers?

  A. Tier 1 is information systems, Tier 2 is mission/business processes, and Tier 3 is the organization.
  B. Tier 1 is the organization, Tier 2 is mission/business processes, and Tier 3 is information systems.
  C. Tier 1 is information systems, Tier 2 is the organization, and Tier 3 is mission/business processes.
  D. Tier 1 is the organization, Tier 2 is information systems, and Tier 3 is mission/business processes.
  A. Tier 1 is information systems, Tier 2 is mission/business processes, and Tier 3 is the organization.

• Question 158:

  An organization was recently hit with a ransomware attack that encrypted critical documents and files that were stored on the corporate file server. Which of the following provides the organization with the BEST chance for recovering their data?

  A. Application white listing!
  B. Antivirus software
  C. Paying the ransom
  D. Offsite backups
  D. Offsite backups

• Question 159:

  Which term describes the process of collecting logs from many sources across an IT infrastructure into a single, centralized platform to be reviewed and analyzed?

  A. Log processing
  B. Log aggregation
  C. Log monitoring
  D. Log normalization
  E. Log correlation
  B. Log aggregation

• Question 160:

  As part of an organization's regular maintenance activities, a security engineer visits the Internet Storm Center advisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this to perform which of the following activities?

  A. Update the latest proxy access list
  B. Monitor the organization's network for suspicious traffic
  C. Monitor the organization's sensitive databases
  D. Update access control list (ACL) rules for network devices
  D. Update access control list (ACL) rules for network devices