[May 07, 2023] Free CertNexus Certification CFR-410 Exam Question [Q52-Q69]

NEW QUESTION 52
When attempting to determine which system or user is generating excessive web traffic, analysis of which of the following would provide the BEST results?

NEW QUESTION 53
During the forensic analysis of a compromised computer image, the investigator found that critical files are missing, caches have been cleared, and the history and event log files are empty. According to this scenario, which of the following techniques is the suspect using?

NEW QUESTION 54
A security analyst has discovered that an application has failed to run. Which of the following is the tool MOST likely used by the analyst for the initial discovery?

NEW QUESTION 55
The Key Reinstallation Attack (KRACK) vulnerability is specific to which types of devices? (Choose two.)

NEW QUESTION 56
An organization recently suffered a data breach involving a server that had Transmission Control Protocol (TCP) port 1433 inadvertently exposed to the Internet. Which of the following services was vulnerable?

NEW QUESTION 57
Which of the following are well-known methods that are used to protect evidence during the forensics process? (Choose three.)

NEW QUESTION 58
Which of the following types of attackers would be MOST likely to use multiple zero-day exploits executed against high-value, well-defended targets for the purposes of espionage and sabotage?

NEW QUESTION 59
Which common source of vulnerability should be addressed to BEST mitigate against URL redirection attacks?

NEW QUESTION 60
A network administrator has determined that network performance has degraded due to excessive use of social media and Internet streaming services. Which of the following would be effective for limiting access to these types of services, without completely restricting access to a site?

NEW QUESTION 61
After a hacker obtained a shell on a Linux box, the hacker then sends the exfiltrated data via Domain Name System (DNS). This is an example of which type of data exfiltration?

NEW QUESTION 62
A security administrator notices a process running on their local workstation called SvrsScEsdKexzCv.exe.
The unknown process is MOST likely:

NEW QUESTION 63
Which of the following could be useful to an organization that wants to test its incident response procedures without risking any system downtime?

NEW QUESTION 64
Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?

NEW QUESTION 65
Which of the following is susceptible to a cache poisoning attack?

NEW QUESTION 66
A secretary receives an email from a friend with a picture of a kitten in it. The secretary forwards it to the
~COMPANYWIDE mailing list and, shortly thereafter, users across the company receive the following message:
“You seem tense. Take a deep breath and relax!”
The incident response team is activated and opens the picture in a virtual machine to test it. After a short analysis, the following code is found in C:
Tempchill.exe:Powershell.exe -Command “do {(for /L %i in (2,1,254) do shutdown /r /m Error! Hyperlink reference not valid.> /f /t / 0 (/c “You seem tense. Take a deep breath and relax!”);Start-Sleep -s 900) } while(1)” Which of the following BEST represents what the attacker was trying to accomplish?

NEW QUESTION 67
According to company policy, all accounts with administrator privileges should have suffix _j a. While reviewing Windows workstation configurations, a security administrator discovers an account without the suffix in the administrator’s group. Which of the following actions should the security administrator take?

NEW QUESTION 68
After a security breach, a security consultant is hired to perform a vulnerability assessment for a company’s web application. Which of the following tools would the consultant use?

NEW QUESTION 69
To minimize vulnerability, which steps should an organization take before deploying a new Internet of Things (IoT) device? (Choose two.)