CertNexus CFR-410 Online Practice Questions and Exam Preparation

CertNexus CFR-410 Online Questions & Answers

• Question 71:

  An incident responder has collected network capture logs in a text file, separated by five or more data fields.

  Which of the following is the BEST command to use if the responder would like to print the file (to terminal/ screen) in numerical order?

  A. cat | tac
  B. more
  C. sort -n
  D. less
  C. sort -n

• Question 72:

  Which are successful Disaster Recovery Plan best practices options to be considered? (Choose three.)

  A. Isolate the services and data as much as possible.
  B. Back up to a NAS device that is attached 24 hours a day, 7 days a week.
  C. Understand which processes are critical to the business and have to run in disaster recovery.
  D. Maintain integrity between primary and secondary deployments.
  E. Store any data elements in the root storage that is used for root access for the workspace.
  A. Isolate the services and data as much as possible.
  C. Understand which processes are critical to the business and have to run in disaster recovery.
  D. Maintain integrity between primary and secondary deployments.

• Question 73:

  An incident at a government agency has occurred and the following actions were taken:

  1. Users have regained access to email accounts

  2. Temporary VPN services have been removed

  3. Host-based intrusion prevention system (HIPS) and antivirus (AV) signatures have been updated

  4. Temporary email servers have been decommissioned

  Which of the following phases of the incident response process match the actions taken?

  A. Containment
  B. Post-incident
  C. Recovery
  D. Identification
  A. Containment

• Question 74:

  Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?

  A. Disabling Windows Updates
  B. Disabling Windows Firewall
  C. Enabling Remote Registry
  D. Enabling Remote Desktop
  D. Enabling Remote Desktop

• Question 75:

  Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?

  A. Generating reports
  B. Establishing scope
  C. Conducting an audit
  D. Assessing exposures
  C. Conducting an audit

• Question 76:

  An incident responder discovers that the CEO logged in from their New York City office and then logged in from a location in Beijing an hour later. The incident responder suspects that the CEO's account has been compromised. Which of the following anomalies MOST likely contributed to the incident responder's suspicion?

  A. Geolocation
  B. False positive
  C. Geovelocity
  D. Advanced persistent threat (APT) activity
  C. Geovelocity

• Question 77:

  A computer forensics analyst suspects that some of the pictures recovered from the suspect's hard drive may contain metadata pertinent to the criminal investigation. Which of the following tools is BEST suited to retrieving any available metadata?

  A. Redline
  B. ExifTool
  C. Xplico
  D. Autopsy
  E. Encase
  B. ExifTool

• Question 78:

  A cybersecurity expert assigned to be the IT manager of a middle-sized company discovers that there is little endpoint security implementation on the company's systems. Which of the following could be included in an endpoint security solution? (Choose two.)

  A. Web proxy
  B. Network monitoring system
  C. Data loss prevention (DLP)
  D. Anti-malware
  E. Network Address Translation (NAT)
  A. Web proxy
  B. Network monitoring system

• Question 79:

  Which two answer options correctly highlight the difference between static and dynamic binary analysis techniques? (Choose two.)

  A. Dynamic analysis tells everything the program can do. and static analysis tells exactly what the program does when it is executed in a given environment and with a particular input.
  B. Static analysis tells everything the program can do. and dynamic analysis tells exactly what the program does when it is executed in a given environment and with a particular input.
  C. Dynamic analysis examines the binary without executing it, while static analysis executes the program and observes its behavior.
  D. Static analysis examines the binary without executing it. while dynamic analysis executes the program and observes its behavior.
  B. Static analysis tells everything the program can do. and dynamic analysis tells exactly what the program does when it is executed in a given environment and with a particular input.
  D. Static analysis examines the binary without executing it. while dynamic analysis executes the program and observes its behavior.

• Question 80:

  Which three answer options are password attack methods and techniques? (Choose three.)

  A. Cross-Site Scripting attack
  B. Brute force attack
  C. Man-in-the-middle attack
  D. Hybrid attack
  E. Dictionary attack
  B. Brute force attack
  D. Hybrid attack
  E. Dictionary attack