CFR-410無料問題集「CertNexus CyberSec First Responder」

質問 1

Detailed step-by-step instructions to follow during a security incident are considered:

（A）Policies

（B）Procedures

（C）Guidelines

（D）Standards

正解：B 解答を投票する

質問 2

A security engineer is setting up security information and event management (SIEM). Which of the following log sources should the engineer include that will contain indicators of a possible web server compromise?
(Choose two.)

（A）Web server logs

（B）Proxy logs

（C）NetFlow logs

（D）Domain controller logs

（E）FTP logs

正解：A、D 解答を投票する

質問 3

Tcpdump is a tool that can be used to detect which of the following indicators of compromise?

（A）Poor network performance

（B）Unknown open ports

（C）Unknown use of protocols

（D）Unusual network traffic

正解：D 解答を投票する

質問 4

A digital forensics investigation requires analysis of a compromised system's physical memory. Which of the following tools should the forensics analyst use to complete this task?

（A）CAINE

（B）Volatility

（C）FTK

（D）Wire shark

（E）Autopsy

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?

（A）Enabling Remote Desktop

（B）Disabling Windows Firewall

（C）Enabling Remote Registry

（D）Disabling Windows Updates

正解：A 解答を投票する

質問 6

During the forensic analysis of a compromised computer image, the investigator found that critical files are missing, caches have been cleared, and the history and event log files are empty. According to this scenario, which of the following techniques is the suspect using?

（A）Anti-forensic techniques

（B）System optimization techniques

（C）Defragmentation techniques

（D）System hardening techniques

正解：A 解答を投票する

質問 7

An administrator investigating intermittent network communication problems has identified an excessive amount of traffic from an external-facing host to an unknown location on the Internet. Which of the following BEST describes what is occurring?

（A）The network is experiencing a denial of service (DoS) attack.

（B）An administrator has misconfigured a web proxy.

（C）A malicious user is exporting sensitive data.

（D）Rogue hardware has been installed.

正解：C 解答を投票する

質問 8

Which of the following could be useful to an organization that wants to test its incident response procedures without risking any system downtime?

（A）Blue team exercise

（B）Business continuity exercise

（C）Tabletop exercise

（D）Red team exercise

正解：B 解答を投票する

質問 9

A system administrator identifies unusual network traffic from outside the local network. Which of the following is the BEST method for mitigating the threat?

（A）Port blocking

（B）Malware scanning

（C）Content filtering

（D）Packet capturing

正解：D 解答を投票する

質問 10

Which of the following can be used as a vulnerability management and assessment tool?

（A）John the Ripper

（B）THC Hydra

（C）Nessus

（D）Cain & Abel

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

CFR-410 無料問題集「CertNexus CyberSec First Responder」

弊社を連絡する

関連リンク

トップ試験