CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 161:

  Vulnerability scanners generally classify vulnerabilities by which of the following? (Choose two.)

  A. Exploit range
  B. Costs
  C. Severity level
  D. Zero days
  E. Threat modeling
  C. Severity level
  D. Zero days

• Question 162:

  A security investigator has detected an unauthorized insider reviewing files containing company secrets.

  Which of the following commands could the investigator use to determine which files have been opened by this user?

  A. ls
  B. lsof
  C. ps
  D. netstat
  B. lsof

• Question 163:

  In which of the following attack phases would an attacker use Shodan?

  A. Scanning
  B. Reconnaissance
  C. Gaining access
  D. Persistence
  A. Scanning

• Question 164:

  During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

  A. Reconnaissance
  B. Scanning
  C. Gaining access
  D. Persistence
  B. Scanning

• Question 165:

  Which of the following are well-known methods that are used to protect evidence during the forensics process? (Choose three.)

  A. Evidence bags
  B. Lock box
  C. Caution tape
  D. Security envelope
  E. Secure rooms
  F. Faraday boxes
  A. Evidence bags
  C. Caution tape
  D. Security envelope

• Question 166:

  Which of the following can increase an attack surface?

  A. Old or unused code
  B. Vulnerability scanning
  C. Mapping of an attack surface
  D. Penetration scanning
  A. Old or unused code

• Question 167:

  According to SANS, when should an incident retrospective be performed?

  A. After law enforcement has identified the perpetrators of the attack.
  B. Within six months following the end of the incident.
  C. No later than two weeks from the end of the incident.
  D. Immediately concluding eradication of the root cause
  C. No later than two weeks from the end of the incident.

• Question 168:

  Traditional SIEM systems provide:

  A. Unknown Attacks Analysis User Behavior Analysis and Network Anomalies
  B. Aggregation, Normalization, Correlation, and Alerting.
  C. Static Malware Analysis, Dynamic Malware Analysis, and Hybrid Malware Analysis.
  D. Privileged Identity Management. Privileged Access Management, and Identity and Access Management.
  B. Aggregation, Normalization, Correlation, and Alerting.

• Question 169:

  Which of the following plans helps IT security staff detect, respond to, and recover from a cyber attack?

  A. Data Recovery Plan
  B. Incident Response Plan
  C. Disaster Recovery Plan
  D. Business Impact Plan
  B. Incident Response Plan

• Question 170:

  Which of the following is a social engineering tactic in which an attacker engages in temptation or promise of a good or service?

  A. Vishing
  B. Baiting
  C. Phishing
  D. Pretexting
  B. Baiting