CertNexus CyberSec First Responder (CFR) - CFR-310 Exam Practice Test
An administrator investigating intermittent network communication problems has identified an excessive amount of traffic from an external-facing host to an unknown location on the Internet. Which of the following BEST describes what is occurring?
Correct Answer: B
Vote an answer
A network security analyst has noticed a flood of Simple Mail Transfer Protocol (SMTP) traffic to internal clients. SMTP traffic should only be allowed to email servers. Which of the following commands would stop this attack? (Choose two.)
Correct Answer: A,B
Vote an answer
Which of the following technologies would reduce the risk of a successful SQL injection attack?
Correct Answer: B
Vote an answer
During a security investigation, a suspicious Linux laptop is found in the server room. The laptop is processing information and indicating network activity. The investigator is preparing to launch an investigation to determine what is happening with this laptop. Which of the following is the MOST appropriate set of Linux commands that should be executed to conduct the investigation?
Correct Answer: D
Vote an answer
When attempting to determine which system or user is generating excessive web traffic, analysis of which of the following would provide the BEST results?
Correct Answer: D
Vote an answer
Which of the following could be useful to an organization that wants to test its incident response procedures without risking any system downtime?
Correct Answer: A
Vote an answer
If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?
Correct Answer: D
Vote an answer
Recently, a cybersecurity research lab discovered that there is a hacking group focused on hacking into the computers of financial executives in Company A to sell the exfiltrated information to Company B.
Which of the following threat motives does this MOST likely represent?
Which of the following threat motives does this MOST likely represent?
Correct Answer: D
Vote an answer
Which asset would be the MOST desirable for a financially motivated attacker to obtain from a health insurance company?
Correct Answer: B
Vote an answer
According to Payment Card Industry Data Security Standard (PCI DSS) compliance requirements, an organization must retain logs for what length of time?
Correct Answer: D
Vote an answer