CertNexus CyberSec First Responder (CFR) (CFR-310) Free Practice Test
Question 1
During which phase of a vulnerability assessment would a security consultant need to document a requirement to retain a legacy device that is no longer supported and cannot be taken offline?
Correct Answer: A
Question 2
Which of the following enables security personnel to have the BEST security incident recovery practices?
Correct Answer: C
Question 3
A common formula used to calculate risk is:+ Threats + Vulnerabilities = Risk. Which of the following represents the missing factor in this formula?
Correct Answer: D
Question 4
Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?
Correct Answer: C
Question 5
Nmap is a tool most commonly used to:
Correct Answer: A
Question 6
An incident response team is concerned with verifying the integrity of security information and event management (SIEM) events after being written to disk. Which of the following represents the BEST option for addressing this concern?
Correct Answer: C
Question 7
A Linux system administrator found suspicious activity on host IP 192.168.10.121. This host is also establishing a connection to IP 88.143.12.123. Which of the following commands should the administrator use to capture only the traffic between the two hosts?
Correct Answer: D
Question 8
An organization recently suffered a breach due to a human resources administrator emailing employee names and Social Security numbers to a distribution list. Which of the following tools would help mitigate this risk from recurring?
Correct Answer: B
Question 9
A security professional discovers a new ransomware strain that disables antivirus on the endpoint during an infection. Which location would be the BEST place for the security professional to find technical information about this malware?
Correct Answer: C
Question 10
A network administrator has determined that network performance has degraded due to excessive use of social media and Internet streaming services. Which of the following would be effective for limiting access to these types of services, without completely restricting access to a site?
Correct Answer: C