CFR-410無料問題集「CertNexus CyberSec First Responder」

質問 1

A security administrator notices a process running on their local workstation called SvrsScEsdKexzCv.exe.
The unknown process is MOST likely:

（A）Malware

（B）A system process

（C）An application process

（D）A port scanner

正解：A 解答を投票する

質問 2

Which of the following is a method of reconnaissance in which a ping is sent to a target with the expectation of receiving a response?

（A）Passive scanning

（B）Network enumeration

（C）Application enumeration

（D）Active scanning

正解：B 解答を投票する

質問 3

During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

（A）Persistence

（B）Scanning

（C）Reconnaissance

（D）Gaining access

正解：B 解答を投票する

質問 4

What are the two most appropriate binary analysis techniques to use in digital forensics analysis? (Choose two.)

（A）Dynamic Analysis

（B）Injection Analysis

（C）Static Analysis

（D）Forensic Analysis

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

What kind of measures and controls are implemented when employees get assigned personal, unique badges when they join the organization, and they remain valid until the employee's last day of work?

（A）Communications security

（B）Physical security

（C）Human resources security

（D）Operations security

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

What is the primary purpose of the "information security incident triage and processing function" in the (CSIRT) Computer Security Incident Response Team Services Framework?

（A）To initially review, categorize, prioritize, and process a reported information security incident.

（B）To receive and process reports of potential information security incidents from constituents, Information Security Event Management services, or third parties.

（C）To analyze and gain an understanding of a confirmed information security incident.

（D）To accept or receive information about an information security incident, as reported from constituents or third parties.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which two options represent the most basic methods for designing a DMZ network firewall? (Choose two.)

（A）Single firewall

（B）Triple firewall

（C）Software firewall

（D）Dual firewall

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which of the following security best practices should a web developer reference when developing a new web- based application?

（A）Control Objectives for Information and Related Technology (COBIT)

（B）Open Web Application Security Project (OWASP)

（C）World Wide Web Consortium (W3C)

（D）Risk Management Framework (RMF)

正解：B 解答を投票する

質問 9

Which of the following is the FIRST step taken to maintain the chain of custody in a forensic investigation?

（A）Security and evaluating the electronic crime scene.

（B）Conducting preliminary interviews

（C）Packaging the electronic device

（D）Transporting the evidence to the forensics lab

正解：C 解答を投票する

質問 10

According to Payment Card Industry Data Security Standard (PCI DSS) compliance requirements, an organization must retain logs for what length of time?

（A）5 years

（B）6 months

（C）1 year

（D）3 months

正解：C 解答を投票する

CFR-410 無料問題集「CertNexus CyberSec First Responder」

弊社を連絡する

関連リンク

トップ試験