Unique Top-selling CFR-410 Exams - New 2023 CertNexus Pratice Exam
CertNexus Certification Dumps CFR-410 Exam for Full Questions - Exam Study Guide
CertNexus CFR-410 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
NEW QUESTION 55
A security analyst is required to collect detailed network traffic on a virtual machine. Which of the following tools could the analyst use?
- A. nbtstat
- B. WinDump
- C. fport
- D. netstat
Answer: D
NEW QUESTION 56
An organization recently suffered a breach due to a human resources administrator emailing employee names and Social Security numbers to a distribution list. Which of the following tools would help mitigate this risk from recurring?
- A. Firewall
- B. Data loss prevention (DLP)
- C. File integrity monitoring
- D. Web proxy
Answer: B
NEW QUESTION 57
Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?
- A. Establishing scope
- B. Assessing exposures
- C. Generating reports
- D. Conducting an audit
Answer: D
NEW QUESTION 58
An administrator investigating intermittent network communication problems has identified an excessive amount of traffic from an external-facing host to an unknown location on the Internet. Which of the following BEST describes what is occurring?
- A. An administrator has misconfigured a web proxy.
- B. A malicious user is exporting sensitive data.
- C. The network is experiencing a denial of service (DoS) attack.
- D. Rogue hardware has been installed.
Answer: B
NEW QUESTION 59
After successfully enumerating the target, the hacker determines that the victim is using a firewall. Which of the following techniques would allow the hacker to bypass the intrusion prevention system (IPS)?
- A. FINS scanning
- B. Port scanning
- C. Xmas scanning
- D. Stealth scanning
Answer: A
NEW QUESTION 60
A Linux administrator is trying to determine the character count on many log files. Which of the following command and flag combinations should the administrator use?
- A. wc -m
- B. tr -d
- C. uniq -c
- D. grep -c
Answer: A
NEW QUESTION 61
While reviewing some audit logs, an analyst has identified consistent modifications to the sshd_config file for an organization's server. The analyst would like to investigate and compare contents of the current file with archived versions of files that are saved weekly. Which of the following tools will be MOST effective during the investigation?
- A. more * | grep
- B. sort *
- C. diff
- D. cat * | cut -d ',' -f 2,5,7
Answer: C
NEW QUESTION 62
An administrator believes that a system on VLAN 12 is Address Resolution Protocol (ARP) poisoning clients on the network. The administrator attaches a system to VLAN 12 and uses Wireshark to capture traffic. After reviewing the capture file, the administrator finds no evidence of ARP poisoning. Which of the following actions should the administrator take next?
- A. Clear the ARP cache on their system.
- B. Enable port mirroring on the switch.
- C. Configure the network adapter to promiscuous mode.
- D. Filter Wireshark to only show ARP traffic.
Answer: C
NEW QUESTION 63
Which of the following methods are used by attackers to find new ransomware victims? (Choose two.)
- A. Phishing
- B. Brute force attack
- C. Distributed denial of service (DDoS) attack
- D. Web crawling
- E. Password guessing
Answer: A,B
NEW QUESTION 64
Detailed step-by-step instructions to follow during a security incident are considered:
- A. Procedures
- B. Standards
- C. Policies
- D. Guidelines
Answer: A
NEW QUESTION 65
Organizations considered "covered entities" are required to adhere to which compliance requirement?
- A. Payment Card Industry Data Security Standard (PCI DSS)
- B. Sarbanes-Oxley Act (SOX)
- C. International Organization for Standardization (ISO) 27001
- D. Health Insurance Portability and Accountability Act of 1996 (HIPAA)
Answer: D
NEW QUESTION 66
A user receives an email about an unfamiliar bank transaction, which includes a link. When clicked, the link redirects the user to a web page that looks exactly like their bank's website and asks them to log in with their username and password. Which type of attack is this?
- A. Phishing
- B. Smishing
- C. Whaling
- D. Vishing
Answer: A
NEW QUESTION 67
After imaging a disk as part of an investigation, a forensics analyst wants to hash the image using a tool that supports piecewise hashing. Which of the following tools should the analyst use?
- A. sha256sum
- B. hashdeep
- C. md5deep
- D. md5sum
Answer: D
NEW QUESTION 68
A common formula used to calculate risk is: + Threats + Vulnerabilities = Risk. Which of the following represents the missing factor in this formula?
- A. Probability
- B. Security
- C. Exploits
- D. Asset
Answer: D
NEW QUESTION 69
Tcpdump is a tool that can be used to detect which of the following indicators of compromise?
- A. Unknown open ports
- B. Unusual network traffic
- C. Unknown use of protocols
- D. Poor network performance
Answer: B
NEW QUESTION 70
According to Payment Card Industry Data Security Standard (PCI DSS) compliance requirements, an organization must retain logs for what length of time?
- A. 6 months
- B. 1 year
- C. 3 months
- D. 5 years
Answer: B
NEW QUESTION 71
An incident responder discovers that the CEO logged in from their New York City office and then logged in from a location in Beijing an hour later. The incident responder suspects that the CEO's account has been compromised. Which of the following anomalies MOST likely contributed to the incident responder's suspicion?
- A. Geolocation
- B. Geovelocity
- C. False positive
- D. Advanced persistent threat (APT) activity
Answer: B
NEW QUESTION 72
During which phase of a vulnerability assessment would a security consultant need to document a requirement to retain a legacy device that is no longer supported and cannot be taken offline?
- A. Determining scope
- B. Identifying critical assets
- C. Conducting post-assessment tasks
- D. Performing a vulnerability scan
Answer: B
NEW QUESTION 73
......
Best way to practice test for CertNexus CFR-410: https://pass4sure.trainingquiz.com/CFR-410-training-materials.html
