CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 61:

  An employee discovered the default credentials in DB servers, which were found by using a word list of commonly used and default passwords in Hydra, the tool behind the Brute functionality. The use of the word list in Hydra is an example of what type of password cracking?

  A. Rainbow tables
  B. hashcat
  C. Markov chains
  D. Brute-force
  E. Dictionary attack
  E. Dictionary attack

• Question 62:

  During a security investigation, a suspicious Linux laptop is found in the server room. The laptop is processing information and indicating network activity. The investigator is preparing to launch an investigation to determine what is happening with this laptop. Which of the following is the MOST appropriate set of Linux commands that should be executed to conduct the investigation?

  A. iperf, traceroute, whois, ls, chown, cat
  B. iperf, wget, traceroute, dc3dd, ls, whois
  C. lsof, chmod, nano, whois, chown, ls
  D. lsof, ifconfig, who, ps, ls, tcpdump
  B. iperf, wget, traceroute, dc3dd, ls, whois

• Question 63:

  An automatic vulnerability scan has been performed. Which is the next step of the vulnerability assessment process?

  A. Hardening the infrastructure
  B. Documenting exceptions
  C. Assessing identified exposures
  D. Generating reports
  D. Generating reports

• Question 64:

  During an incident, the following actions have been taken:

  1. Executing the malware in a sandbox environment

  2. Reverse engineering the malware

  3. Conducting a behavior analysis

  Based on the steps presented, which of the following incident handling processes has been taken?

  A. Containment
  B. Eradication
  C. Recovery
  D. Identification
  A. Containment

• Question 65:

  What allows a company to restore normal business operations in a matter of minutes or seconds?

  A. Cold site
  B. Warm site
  C. Mobile site
  D. Hot site
  D. Hot site

• Question 66:

  Which of the following are legally compliant forensics applications that will detect an alternative data stream (ADS) or a file with an incorrect file extension? (Choose two.)

  A. Disk duplicator
  B. EnCase
  C. dd
  D. Forensic Toolkit (FTK)
  E. Write blocker
  B. EnCase
  D. Forensic Toolkit (FTK)

• Question 67:

  How does encryption work to protect information on remote workers' computers?

  A. It is difficult to set up, so an unskilled attacker won't be able to figure it out.
  B. Without the proper key, an attacker won't be able to unscramble the encrypted information.
  C. Using encryption requires advanced training in mathematics, which is beyond the capabilities of most attackers.
  D. Information can be encrypted but it can never be decrypted leaving an attacker unable to read the information
  B. Without the proper key, an attacker won't be able to unscramble the encrypted information.

• Question 68:

  What kind of measures and controls are implemented when employees get assigned personal, unique badges when they join the organization, and they remain valid until the employee's last day of work?

  A. Human resources security
  B. Communications security
  C. Physical security
  D. Operations security
  C. Physical security

• Question 69:

  Which of the following can be used as a vulnerability management and assessment tool?

  A. Nessus
  B. THC Hydra
  C. Cain and Abel
  D. John the Ripper
  A. Nessus

• Question 70:

  Which of the following is the GREATEST risk of having security information and event management (SIEM) collect computer names with older log entries?

  A. There may be duplicate computer names on the network.
  B. The computer name may not be admissible evidence in court.
  C. Domain Name System (DNS) records may have changed since the log was created.
  D. There may be field name duplication when combining log files.
  D. There may be field name duplication when combining log files.