Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
CertNexus
CyberSec First Responder (CFR)
CFR-410
CyberSec First Responder (CFR) Exam Questions and Answers

Pass the CertNexus CyberSec First Responder (CFR) CFR-410 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam CFR-410 Premium Access

View all detail and faqs for the CFR-410 exam

Go to Exam

754 Students Passed

91% Average Score

92% Same Questions

Viewing page 5 out of 6 pages

Viewing questions 41-50 out of questions

Questions # 41:

Which of the following regulations is most applicable to a public utility provider operating in the United States?

Options:

GDPR

NERC

FISMA

HIPAA

Answer

Explanation

The North American Electric Reliability Corporation (NERC) sets regulations and standards for the reliability and security of the bulk power system in the United States. Public utility providers in the energy sector must comply with NERC standards to ensure operational safety and prevent disruptions.

Questions # 42:

A company has noticed a trend of attackers gaining access to corporate mailboxes. Which of the following

would be the BEST action to take to plan for this kind of attack in the future?

Options:

Scanning email server for vulnerabilities

Conducting security awareness training

Hardening the Microsoft Exchange Server

Auditing account password complexity

Answer

Questions # 43:

Which of the following is the GREATEST risk of having security information and event management (SIEM) collect computer names with older log entries?

Options:

There may be duplicate computer names on the network.

The computer name may not be admissible evidence in court.

Domain Name System (DNS) records may have changed since the log was created.

There may be field name duplication when combining log files.

Answer

Questions # 44:

Which of the following attacks involves sending a large amount of spoofed User Datagram Protocol (UDP) traffic to a router’s broadcast address within a network?

Options:

Land attack

Fraggle attack

Smurf attack

Teardrop attack

Answer

Questions # 45:

After successfully enumerating the target, the hacker determines that the victim is using a firewall. Which of the following techniques would allow the hacker to bypass the intrusion prevention system (IPS)?

Options:

Stealth scanning

Xmas scanning

FINS scanning

Port scanning

Answer

Explanation

[Reference: https://nmap.org/book/firewall-subversion.html, ]

Questions # 46:

During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

Options:

Reconnaissance

Scanning

Gaining access

Persistence

Answer

Explanation

[Reference: https://blog.stealthbits.com/finding-microsoft-sql-server-targets-sql-attacks/, ]

Questions # 47:

Which of the following are common areas of vulnerabilities in a network switch? (Choose two.)

Options:

Default port state

Default credentials

Default protocols

Default encryption

Default IP address

Answer

A, B

Questions # 48:

Which of the following methods are used by attackers to find new ransomware victims? (Choose two.)

Options:

Web crawling

Distributed denial of service (DDoS) attack

Password guessing

Phishing

Brute force attack

Answer

D, E

Explanation

[Reference: https://www.itproportal.com/features/the-four-most-popular-methods-hackers-use-to-spread- ransomware/, ]

Questions # 49:

Which of the following is a social engineering tactic in which an attacker engages in temptation or promise of a good or service?

Options:

Vishing

Baiting

Phishing

Pretexting

Answer

Explanation

Baiting is a social engineering tactic in which an attacker entices the target with the promise of something desirable, such as free software or a service, in order to lure them into taking an action that compromises their security, such as downloading malicious software or providing sensitive information.

Questions # 50:

An incident responder was asked to analyze malicious traffic. Which of the following tools would be BEST for this?

Options:

Hex editor

tcpdump

Wireshark

Snort

Answer

Explanation

[Reference: https://resources.infosecinstitute.com/category/certifications-training/network-traffic-analysis-for- incident-response/threat-intelligence-collection-and-analysis/analyzing-fileless-malware/#gref, ]

Viewing page 5 out of 6 pages

Viewing questions 41-50 out of questions