CertNexus CyberSec First Responder - CFR-410 Exam Practice Test

Which of the following should normally be blocked through a firewall?

The NIST framework 800-137 breaks down the concept of continuous monitoring into which system of tiers?

Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?

An administrator believes that a system on VLAN 12 is Address Resolution Protocol (ARP) poisoning clients on the network. The administrator attaches a system to VLAN 12 and uses Wireshark to capture traffic. After reviewing the capture file, the administrator finds no evidence of ARP poisoning. Which of the following actions should the administrator take next?

After successfully enumerating the target, the hacker determines that the victim is using a firewall. Which of the following techniques would allow the hacker to bypass the intrusion prevention system (IPS)?

A company website was hacked via the following SQL query:
email, passwd, login_id, full_name FROM members
WHERE email = "[email protected]"; DROP TABLE members; -"
Which of the following did the hackers perform?

Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?

When performing an investigation, a security analyst needs to extract information from text files in a Windows operating system. Which of the following commands should the security analyst use?

An organization recently suffered a data breach involving a server that had Transmission Control Protocol (TCP) port 1433 inadvertently exposed to the Internet. Which of the following services was vulnerable?

A security operations center (SOC) analyst observed an unusually high number of login failures on a particular database server. The analyst wants to gather supporting evidence before escalating the observation to management. Which of the following expressions will provide login failure data for 11/24/2015?

Which of the following can increase an attack surface?

Which approach to cybersecurity involves a series of defensive mechanisms that are layered to protect valuable data and information?

In which of the following attack phases would an attacker use Shodan?

Which of the following is the BEST way to prevent social engineering attacks?