최신Logical Operations CyberSec First Responder - CFR-210무료샘플문제
문제1
An administrator wants to block Java exploits that were not detected by the organization's antivirus
product. Which of the following mitigation methods should an incident responder perform? (Choose two.)
An administrator wants to block Java exploits that were not detected by the organization's antivirus
product. Which of the following mitigation methods should an incident responder perform? (Choose two.)
정답: B,E
문제2
To redact or obfuscate sensitive data, a company requires its name be changed throughout a portincident
report. Using a Linux sed command, which of the following will replace the company's name with "Acme"?
To redact or obfuscate sensitive data, a company requires its name be changed throughout a portincident
report. Using a Linux sed command, which of the following will replace the company's name with "Acme"?
정답: D
문제3
An organization needs to determine of any systems on its network (10.0.25.0/24) have web services
running on port 80 or 443. Which of the following is the BEST command to do this?
An organization needs to determine of any systems on its network (10.0.25.0/24) have web services
running on port 80 or 443. Which of the following is the BEST command to do this?
정답: B
문제4
Which of the following are legally compliant forensics applications that will detect ADS or a file with an
incorrect file extension? (Choose two.)
Which of the following are legally compliant forensics applications that will detect ADS or a file with an
incorrect file extension? (Choose two.)
정답: B,E
문제5
Malicious code that can replicate itself using various techniques is referred to as a:
Malicious code that can replicate itself using various techniques is referred to as a:
정답: B
문제6
Which of the following describes pivoting?
Which of the following describes pivoting?
정답: C
문제7
DRAG DROP
When perpetrating an attack, there are often a number of phases attackers will undertake, sometimes
taking place over a long period of time. Place the following phases in the correct chronological order from
first (1) to last (5).
DRAG DROP
When perpetrating an attack, there are often a number of phases attackers will undertake, sometimes
taking place over a long period of time. Place the following phases in the correct chronological order from
first (1) to last (5).
정답:
문제8
An incident responder suspects that a host behind a firewall is infected with malware. Which of the
following should the responder use to find the IP address of the infected machine?
An incident responder suspects that a host behind a firewall is infected with malware. Which of the
following should the responder use to find the IP address of the infected machine?
정답: B
문제9
DRAG DROP
Drag and drop the following steps in the correct order from first (1) to last (7) that a forensic expert would
follow based on data analysis in a Windows system.
DRAG DROP
Drag and drop the following steps in the correct order from first (1) to last (7) that a forensic expert would
follow based on data analysis in a Windows system.
정답:
문제10
The incident response team needs to track which user last connected to a specific Windows domain
controller. Which of the following is the BEST way to identify that specific user?
The incident response team needs to track which user last connected to a specific Windows domain
controller. Which of the following is the BEST way to identify that specific user?
정답: D