Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free CyberSec First Responder (CFR) Exam Practice Questions

Question # 31

Which three tools are used for integrity verification of files? (Choose three.)

Options:

A.  

sha256sum

B.  

ent

C.  

pgp32

D.  

md5sum

E.  

md5deep

Discussion 0
Question # 32

According to Payment Card Industry Data Security Standard (PCI DSS) compliance requirements, an organization must retain logs for what length of time?

Options:

A.  

3 months

B.  

6 months

C.  

1 year

D.  

5 years

Discussion 0
Question # 33

Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?

Options:

A.  

Disabling Windows Updates

B.  

Disabling Windows Firewall

C.  

Enabling Remote Registry

D.  

Enabling Remote Desktop

Discussion 0
Question # 34

A security administrator needs to review events from different systems located worldwide. Which of the

following is MOST important to ensure that logs can be effectively correlated?

Options:

A.  

Logs should be synchronized to their local time zone.

B.  

Logs should be synchronized to a common, predefined time source.

C.  

Logs should contain the username of the user performing the action.

D.  

Logs should include the physical location of the action performed.

Discussion 0
Question # 35

Which of the following are part of the hardening phase of the vulnerability assessment process? (Choose two.)

Options:

A.  

Installing patches

B.  

Updating configurations

C.  

Documenting exceptions

D.  

Conducting audits

E.  

Generating reports

Discussion 0
Question # 36

Which of the following tools can be used as an intrusion detection system (IDS)? (Choose three.)

Options:

A.  

Bro

B.  

Wireshark/tshark

C.  

Metasploit

D.  

Suricata

E.  

Snort

Discussion 0
Question # 37

A network security analyst has noticed a flood of Simple Mail Transfer Protocol (SMTP) traffic to internal clients. SMTP traffic should only be allowed to email servers. Which of the following commands would stop this attack? (Choose two.)

Options:

A.  

iptables -A INPUT -p tcp –dport 25 -d x.x.x.x -j ACCEPT

B.  

iptables -A INPUT -p tcp –sport 25 -d x.x.x.x -j ACCEPT

C.  

iptables -A INPUT -p tcp –dport 25 -j DROP

D.  

iptables -A INPUT -p tcp –destination-port 21 -j DROP

E.  

iptables -A FORWARD -p tcp –dport 6881:6889 -j DROP

Discussion 0
Question # 38

An organization was recently hit with a ransomware attack that encrypted critical documents and files that were stored on the corporate file server.

Which of the following provides the organization with the BEST chance for recovering their data?

Options:

A.  

Application white listing!

B.  

Antivirus software

C.  

Paying the ransom

D.  

Offsite backups

Discussion 0
Question # 39

During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

Options:

A.  

Reconnaissance

B.  

Scanning

C.  

Gaining access

D.  

Persistence

Discussion 0
Question # 40

Traditional SIEM systems provide:

Options:

A.  

Unknown Attacks Analysis User Behavior Analysis and Network Anomalies

B.  

Aggregation, Normalization, Correlation, and Alerting.

C.  

Static Malware Analysis, Dynamic Malware Analysis, and Hybrid Malware Analysis.

D.  

Privileged Identity Management. Privileged Access Management, and Identity and Access Management.

Discussion 0

CFR-410 PDF

CFR-410 PDF (Printable)
$46.5
$154.99

CFR-410 Testing Engine

CFR-410 PDF (Printable)
$51
$169.99

CFR-410 PDF + Testing Engine

CFR-410 PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions