最新的CertNexus CyberSec First Responder (CFR) - CFR-310免費考試真題
During a log review, an incident responder is attempting to process the proxy server's log files but finds that they are too large to be opened by any file viewer. Which of the following is the MOST appropriate technique to open and analyze these log files?
正確答案: C
An incident at a government agency has occurred and the following actions were taken:
-Users have regained access to email accounts
-Temporary VPN services have been removed
-Host-based intrusion prevention system (HIPS) and antivirus (AV) signatures have been updated
-Temporary email servers have been decommissioned
Which of the following phases of the incident response process match the actions taken?
-Users have regained access to email accounts
-Temporary VPN services have been removed
-Host-based intrusion prevention system (HIPS) and antivirus (AV) signatures have been updated
-Temporary email servers have been decommissioned
Which of the following phases of the incident response process match the actions taken?
正確答案: B
Which of the following describes United States federal government cybersecurity policies and guidelines?
正確答案: D
Which of the following technologies would reduce the risk of a successful SQL injection attack?
正確答案: C
A network administrator has determined that network performance has degraded due to excessive use of social media and Internet streaming services. Which of the following would be effective for limiting access to these types of services, without completely restricting access to a site?
正確答案: C
An incident responder has collected network capture logs in a text file, separated by five or more data fields.
Which of the following is the BEST command to use if the responder would like to print the file (to terminal/ screen) in numerical order?
Which of the following is the BEST command to use if the responder would like to print the file (to terminal/ screen) in numerical order?
正確答案: D
An incident handler is assigned to initiate an incident response for a complex network that has been affected by malware. Which of the following actions should be taken FIRST?
正確答案: D
Which of the following is a method of reconnaissance in which a ping is sent to a target with the expectation of receiving a response?
正確答案: B
During an incident, the following actions have been taken:
-Executing the malware in a sandbox environment
-Reverse engineering the malware
-Conducting a behavior analysis
Based on the steps presented, which of the following incident handling processes has been taken?
-Executing the malware in a sandbox environment
-Reverse engineering the malware
-Conducting a behavior analysis
Based on the steps presented, which of the following incident handling processes has been taken?
正確答案: B
說明：（僅 Fast2test 成員可見）
Organizations considered "covered entities" are required to adhere to which compliance requirement?
正確答案: B