最新的Logical Operations CyberSec First Responder - CFR-210免費考試真題
問題1
DRAG DROP
Drag and drop the following steps to perform a successful social engineering attack in the correct order,
from first (1) to last (6).
Drag and drop the following steps to perform a successful social engineering attack in the correct order,
from first (1) to last (6).
正確答案:
問題2
A security auditor has been asked to analyze event logs to look for signs of suspicious behavior. The
company operated on a normal workday schedule (e.g., Monday through Friday, 8 am- 5 pm) and has
implemented stringent access control policies (e .g. password complexity, failed login attempts).
Which of the following provides the MOST reason for concern?
company operated on a normal workday schedule (e.g., Monday through Friday, 8 am- 5 pm) and has
implemented stringent access control policies (e .g. password complexity, failed login attempts).
Which of the following provides the MOST reason for concern?
正確答案: D
問題3
An alert has been triggered identifying a new application running on a Windows server. Which of the
following tools can be used to identify the application? (Choose two.)
following tools can be used to identify the application? (Choose two.)
正確答案: A,B
問題4
A logfile generated from a Windows server was moved to a Linux system for further analysis. A system
administrator is now making edits to the file with vi and notices the file contains numerous instances of
Ctrl-M (AM) characters. Which of the following command line tools is the administrator MOST likely to use
to remove these characters from the logfile? (Choose two.)
administrator is now making edits to the file with vi and notices the file contains numerous instances of
Ctrl-M (AM) characters. Which of the following command line tools is the administrator MOST likely to use
to remove these characters from the logfile? (Choose two.)
正確答案: D,E
問題5
A user reports a pop-up error when starting a Windows machine. The error states that the machine has
been infected with a virus and instructs the user to download a new antivirus client. In which of the
following locations should the incident responder check to find what is generating the error message?
(Choose two.)
been infected with a virus and instructs the user to download a new antivirus client. In which of the
following locations should the incident responder check to find what is generating the error message?
(Choose two.)
正確答案: C,D
問題6
DRAG DROP
Drag and drop the following steps in the correct order from first (1) to last (7) that a forensic expert would
follow based on data analysis in a Windows system.
Drag and drop the following steps in the correct order from first (1) to last (7) that a forensic expert would
follow based on data analysis in a Windows system.
正確答案:
問題7
During a malware outbreak, a security analyst has been asked to capture network traffic in hourly
increments for analysis by the incident response team . Which of the following tcpdump commands would
generate hourly pcap files?
increments for analysis by the incident response team . Which of the following tcpdump commands would
generate hourly pcap files?
正確答案: B
問題8
A DMZ web server has been compromised. During the log review, the incident responder wants to parse all common internal Class A addresses from the log.
Which of the following commands should the responder use to accomplish this?
Which of the following commands should the responder use to accomplish this?
正確答案: C
問題9
Which of the following mitigations will remain intact, regardless of the underlying network protocol?
正確答案: D
問題10
An organization performs regular updates to its network devices to alert and prevent access to streaming
media sites by the employees. Each device will send logs and alerts to a centralized server for storage,
archive, and analysis. Which of the following BEST describes the system that is correlating the data found
in all alerts and logs?
media sites by the employees. Each device will send logs and alerts to a centralized server for storage,
archive, and analysis. Which of the following BEST describes the system that is correlating the data found
in all alerts and logs?
正確答案: A
