2023 Valid CFR-410 Real Exam Questions, practice CertNexus Certification [Q29-Q53]

NEW QUESTION 29
A network administrator has determined that network performance has degraded due to excessive use of social media and Internet streaming services. Which of the following would be effective for limiting access to these types of services, without completely restricting access to a site?

NEW QUESTION 30
Which of the following are legally compliant forensics applications that will detect an alternative data stream (ADS) or a file with an incorrect file extension? (Choose two.)

NEW QUESTION 31
A security operations center (SOC) analyst observed an unusually high number of login failures on a particular database server. The analyst wants to gather supporting evidence before escalating the observation to management. Which of the following expressions will provide login failure data for 11/24/2015?

NEW QUESTION 32
A user receives an email about an unfamiliar bank transaction, which includes a link. When clicked, the link redirects the user to a web page that looks exactly like their bank’s website and asks them to log in with their username and password. Which type of attack is this?

NEW QUESTION 33
A security engineer is setting up security information and event management (SIEM). Which of the following log sources should the engineer include that will contain indicators of a possible web server compromise? (Choose two.)

NEW QUESTION 34
Which of the following is a method of reconnaissance in which a ping is sent to a target with the expectation of receiving a response?

NEW QUESTION 35
Which of the following is susceptible to a cache poisoning attack?

NEW QUESTION 36
During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

NEW QUESTION 37
While reviewing some audit logs, an analyst has identified consistent modifications to the sshd_config file for an organization’s server. The analyst would like to investigate and compare contents of the current file with archived versions of files that are saved weekly. Which of the following tools will be MOST effective during the investigation?

NEW QUESTION 38
Which of the following is a cybersecurity solution for insider threats to strengthen information protection?

NEW QUESTION 39
In which of the following attack phases would an attacker use Shodan?

NEW QUESTION 40
When attempting to determine which system or user is generating excessive web traffic, analysis of which of the following would provide the BEST results?

NEW QUESTION 41
Senior management has stated that antivirus software must be installed on all employee workstations. Which of the following does this statement BEST describe?

NEW QUESTION 42
A common formula used to calculate risk is: + Threats + Vulnerabilities = Risk. Which of the following represents the missing factor in this formula?

NEW QUESTION 43
Which of the following are part of the hardening phase of the vulnerability assessment process? (Choose two.)

NEW QUESTION 44
Which of the following are well-known methods that are used to protect evidence during the forensics process? (Choose three.)

NEW QUESTION 45
Which of the following attacks involves sending a large amount of spoofed User Datagram Protocol (UDP) traffic to a router’s broadcast address within a network?

NEW QUESTION 46
Which of the following security best practices should a web developer reference when developing a new web- based application?

NEW QUESTION 47
Which of the following are common areas of vulnerabilities in a network switch? (Choose two.)

NEW QUESTION 48
A company has noticed a trend of attackers gaining access to corporate mailboxes. Which of the following would be the BEST action to take to plan for this kind of attack in the future?

NEW QUESTION 49
Which of the following does the command nmap -open 10.10.10.3 do?

NEW QUESTION 50
When tracing an attack to the point of origin, which of the following items is critical data to map layer 2 switching?

NEW QUESTION 51
A security administrator needs to review events from different systems located worldwide. Which of the following is MOST important to ensure that logs can be effectively correlated?

NEW QUESTION 52
An organization recently suffered a data breach involving a server that had Transmission Control Protocol (TCP) port 1433 inadvertently exposed to the Internet. Which of the following services was vulnerable?

NEW QUESTION 53
It was recently discovered that many of an organization’s servers were running unauthorized cryptocurrency mining software. Which of the following assets were being targeted in this attack? (Choose two.)