Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
CertNexus
CyberSec First Responder (CFR)
CFR-410
CyberSec First Responder (CFR) Exam Questions and Answers

Pass the CertNexus CyberSec First Responder (CFR) CFR-410 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam CFR-410 Premium Access

View all detail and faqs for the CFR-410 exam

Go to Exam

754 Students Passed

91% Average Score

92% Same Questions

Viewing page 3 out of 6 pages

Viewing questions 21-30 out of questions

Questions # 21:

During which phase of a vulnerability assessment would a security consultant need to document a requirement to retain a legacy device that is no longer supported and cannot be taken offline?

Options:

Conducting post-assessment tasks

Determining scope

Identifying critical assets

Performing a vulnerability scan

Answer

Questions # 22:

The NIST framework 800-137 breaks down the concept of continuous monitoring into which system of tiers?

Options:

Tier 1 is information systems, Tier 2 is mission/business processes, and Tier 3 is the organization.

Tier 1 is the organization, Tier 2 is mission/business processes, and Tier 3 is information systems.

Tier 1 is information systems, Tier 2 is the organization, and Tier 3 is mission/business processes.

Tier 1 is the organization, Tier 2 is information systems, and Tier 3 is mission/business processes.

Answer

Explanation

The NIST 800-137 framework for continuous monitoring categorizes monitoring activities into three tiers:

Tier 1: Information systems, where monitoring focuses on the status and performance of individual systems.

Tier 2: Mission/business processes, which monitor the operations and processes necessary to support organizational missions.

Tier 3: The organization, where overall strategic goals and enterprise-wide risks are assessed and managed.

Questions # 23:

Nmap is a tool most commonly used to:

Options:

Map a route for war-driving

Determine who is logged onto a host

Perform network and port scanning

Scan web applications

Answer

Explanation

[Reference: https://www.networkworld.com/article/3296740/what-is-nmap-why-you-need-this-network- mapper.html, ]

Questions # 24:

An automatic vulnerability scan has been performed. Which is the next step of the vulnerability assessment process?

Options:

Hardening the infrastructure

Documenting exceptions

Assessing identified exposures

Generating reports

Answer

Explanation

[Reference: https://securityintelligence.com/a-step-by-step-guide-to-vulnerability-assessment/, , ]

Questions # 25:

After imaging a disk as part of an investigation, a forensics analyst wants to hash the image using a tool that supports piecewise hashing. Which of the following tools should the analyst use?

Options:

md5sum

sha256sum

md5deep

hashdeep

Answer

Questions # 26:

Which of the following represents a front-end security capability that addresses cyber resiliency?

Options:

Multi-factor authentication

Immutability of backups

Key management

Physical separation of backups

Answer

Explanation

Multi-factor authentication (MFA) is a front-end security capability that enhances cyber resiliency by requiring users to provide multiple forms of verification before gaining access to systems or applications. This helps protect against unauthorized access, which is a key component of maintaining resilience in the face of cyber threats.

Questions # 27:

Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?

Options:

Generating reports

Establishing scope

Conducting an audit

Assessing exposures

Answer

Explanation

[Reference: https://www.ogcio.gov.hk/en/our_work/information_cyber_security/government/doc/ISPG-SM01.pdf, ]

Questions # 28:

Which of the following does the command nmap –open 10.10.10.3 do?

Options:

Execute a scan on a single host, returning only open ports.

Execute a scan on a subnet, returning detailed information on open ports.

Execute a scan on a subnet, returning all hosts with open ports.

Execute a scan on a single host, returning open services.

Answer

Questions # 29:

According to Payment Card Industry Data Security Standard (PCI DSS) compliance requirements, an organization must retain logs for what length of time?