CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 11:

  A security administrator notices a process running on their local workstation called SvrsScEsdKexzCv.exe.

  The unknown process is MOST likely:

  A. Malware
  B. A port scanner
  C. A system process
  D. An application process
  A. Malware

• Question 12:

  Which of the following describes United States federal government cybersecurity policies and guidelines?

  A. NIST
  B. ANSI
  C. NERC
  D. GDPR
  A. NIST

• Question 13:

  Which of the following tools can be used as an intrusion detection system (IDS)? (Choose three.)

  A. Bro
  B. Wireshark/tshark
  C. Metasploit
  D. Suricata
  E. Snort
  A. Bro
  D. Suricata
  E. Snort

• Question 14:

  A security engineer is setting up security information and event management (SIEM). Which of the following log sources should the engineer include that will contain indicators of a possible web server compromise? (Choose two.)

  A. NetFlow logs
  B. Web server logs
  C. Domain controller logs
  D. Proxy logs
  E. FTP logs
  B. Web server logs
  C. Domain controller logs

• Question 15:

  Which of the following are part of the hardening phase of the vulnerability assessment process? (Choose two.)

  A. Installing patches
  B. Updating configurations
  C. Documenting exceptions
  D. Conducting audits
  E. Generating reports
  A. Installing patches
  B. Updating configurations

• Question 16:

  An administrator investigating intermittent network communication problems has identified an excessive amount of traffic from an external-facing host to an unknown location on the Internet. Which of the following BEST describes what is occurring?

  A. The network is experiencing a denial of service (DoS) attack.
  B. A malicious user is exporting sensitive data.
  C. Rogue hardware has been installed.
  D. An administrator has misconfigured a web proxy.
  B. A malicious user is exporting sensitive data.

• Question 17:

  During recovery from an incident, which three options should a company focus on? (Choose three.)

  A. Evaluating the success of the current incident response plan
  B. Ensuring proper notifications have been made
  C. Providing details of the breach to media
  D. Identifying the responsible parties
  E. Restoring system and network connectivity
  F. Determining the financial impact of the breach
  A. Evaluating the success of the current incident response plan
  B. Ensuring proper notifications have been made
  E. Restoring system and network connectivity

• Question 18:

  An organization recently suffered a data breach involving a server that had Transmission Control Protocol (TCP) port 1433 inadvertently exposed to the Internet. Which of the following services was vulnerable?

  A. Internet Message Access Protocol (IMAP)
  B. Network Basic Input/Output System (NetBIOS)
  C. Database
  D. Network Time Protocol (NTP)
  C. Database

• Question 19:

  After imaging a disk as part of an investigation, a forensics analyst wants to hash the image using a tool that supports piecewise hashing. Which of the following tools should the analyst use?

  A. md5sum
  B. sha256sum
  C. md5deep
  D. hashdeep
  A. md5sum

• Question 20:

  Which common source of vulnerability should be addressed to BEST mitigate against URL redirection attacks?

  A. Application
  B. Users
  C. Network infrastructure
  D. Configuration files
  A. Application