CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 51:

  The "right to be forgotten" is considered a core tenet of which of the following privacy- focused acts or regulations?

  A. GDPR
  B. CCPA
  C. PPA
  D. HIPPA
  E. COPPA
  A. GDPR

• Question 52:

  Which of the following is an automated password cracking technique that uses a combination of uppercase and lowercase letters, 0-9 numbers, and special characters?

  A. Dictionary attack
  B. Password guessing
  C. Brute force attack
  D. Rainbow tables
  C. Brute force attack

• Question 53:

  A company is reviewing the results of the Nikto scan, and they determined that several internal web servers (likely associated with internal web applications) have a number of vulnerabilities. They also noticed several servers that have returned click-jacking vulnerabilities. Which option should be used to remediate this issue?

  A. Update the SSL server certificate.
  B. Upgrade the SSL version.
  C. Modify the SSL cipher configuration.
  D. Modify the HTTP X-Frame-Options.
  D. Modify the HTTP X-Frame-Options.

• Question 54:

  When performing a vulnerability assessment from outside the perimeter, which of the following network devices is MOST likely to skew the scan results?

  A. Access Point
  B. Router
  C. Firewall
  D. IDS
  E. Switch
  C. Firewall

• Question 55:

  A system administrator has been tasked with developing highly detailed instructions for patching managed assets using the corporate patch management solution. These instructions are an example of which of the following?

  A. Process
  B. Procedure
  C. Standard
  D. Policy
  B. Procedure

• Question 56:

  Which of the following are common areas of vulnerabilities in a network switch? (Choose two.)

  A. Default port state
  B. Default credentials
  C. Default protocols
  D. Default encryption
  E. Default IP address
  A. Default port state
  B. Default credentials

• Question 57:

  An administrator believes that a system on VLAN 12 is Address Resolution Protocol (ARP) poisoning clients on the network. The administrator attaches a system to VLAN 12 and uses Wireshark to capture traffic. After reviewing the capture file, the administrator finds no evidence of ARP poisoning. Which of the following actions should the administrator take next?

  A. Clear the ARP cache on their system.
  B. Enable port mirroring on the switch.
  C. Filter Wireshark to only show ARP traffic.
  D. Configure the network adapter to promiscuous mode.
  D. Configure the network adapter to promiscuous mode.

• Question 58:

  Which of the following digital forensic goals is being provided with hashing and time- stamping of the electronic evidence?

  A. Confidentiality
  B. Encryption
  C. Integrity
  D. Availability
  E. Chain of custody
  C. Integrity

• Question 59:

  A Windows system administrator has received notification from a security analyst regarding new malware that executes under the process name of "armageddon.exe" along with a request to audit all department workstations for its presence. In the absence of GUI-based tools, what command could the administrator execute to complete this task?

  A. ps -ef | grep armageddon
  B. top | grep armageddon
  C. wmic process list brief | find "armageddon.exe"
  D. wmic startup list full | find "armageddon.exe"
  C. wmic process list brief | find "armageddon.exe"

• Question 60:

  After successfully enumerating the target, the hacker determines that the victim is using a firewall. Which of the following techniques would allow the hacker to bypass the intrusion prevention system (IPS)?

  A. Stealth scanning
  B. Xmas scanning
  C. FINS scanning
  D. Port scanning
  C. FINS scanning