최신CertNexus CyberSec First Responder - CFR-410무료샘플문제
문제1
If an organization suspects criminal activity during the response to an incident, when should they notify law enforcement authorities?
If an organization suspects criminal activity during the response to an incident, when should they notify law enforcement authorities?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제2
A company help desk is flooded with calls regarding systems experiencing slow performance and certain Internet sites taking a long time to load or not loading at all. The security operations center (SOC) analysts who receive these calls take the following actions:
-Running antivirus scans on the affected user machines
-Checking department membership of affected users
-Checking the host-based intrusion prevention system (HIPS) console for affected user machine alerts
-Checking network monitoring tools for anomalous activities
Which of the following phases of the incident response process match the actions taken?
A company help desk is flooded with calls regarding systems experiencing slow performance and certain Internet sites taking a long time to load or not loading at all. The security operations center (SOC) analysts who receive these calls take the following actions:
-Running antivirus scans on the affected user machines
-Checking department membership of affected users
-Checking the host-based intrusion prevention system (HIPS) console for affected user machine alerts
-Checking network monitoring tools for anomalous activities
Which of the following phases of the incident response process match the actions taken?
정답: B
문제3
An incident responder discovers that the CEO logged in from their New York City office and then logged in from a location in Beijing an hour later. The incident responder suspects that the CEO's account has been compromised. Which of the following anomalies MOST likely contributed to the incident responder's suspicion?
An incident responder discovers that the CEO logged in from their New York City office and then logged in from a location in Beijing an hour later. The incident responder suspects that the CEO's account has been compromised. Which of the following anomalies MOST likely contributed to the incident responder's suspicion?
정답: A
문제4
What is the definition of a security breach?
What is the definition of a security breach?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제5
Which of the following attack vectors capitalizes on a previously undisclosed issue with a software application?
Which of the following attack vectors capitalizes on a previously undisclosed issue with a software application?
정답: E
설명: (ITDumpsKR 회원만 볼 수 있음)
문제6
Senior management has stated that antivirus software must be installed on all employee workstations. Which of the following does this statement BEST describe?
Senior management has stated that antivirus software must be installed on all employee workstations. Which of the following does this statement BEST describe?
정답: D
문제7
A web server is under a denial of service (DoS) attack. The administrator reviews logs and creates an access control list (ACL) to stop the attack. Which of the following technologies could perform these steps automatically in the future?
A web server is under a denial of service (DoS) attack. The administrator reviews logs and creates an access control list (ACL) to stop the attack. Which of the following technologies could perform these steps automatically in the future?
정답: A
문제8
In which of the following attack phases would an attacker use Shodan?
In which of the following attack phases would an attacker use Shodan?
정답: B
문제9
A security analyst needs to capture network traffic from a compromised Mac host. They attempt to execute the tcpdump command using their general user account but continually receive an "Operation Not Permitted" error.
Use of which of the following commands will allow the analyst to capture traffic using tcpdump successfully?
A security analyst needs to capture network traffic from a compromised Mac host. They attempt to execute the tcpdump command using their general user account but continually receive an "Operation Not Permitted" error.
Use of which of the following commands will allow the analyst to capture traffic using tcpdump successfully?
정답: C
설명: (ITDumpsKR 회원만 볼 수 있음)