Question 1

Which of the following is an automated password cracking technique that uses a combination of uppercase and lowercase letters, 0-9 numbers, and special characters?

Options :

A : Dictionary attack

B : Password guessing

C : Brute force attack

D : Rainbow tables

Answer: C

Question 2

Which asset would be the MOST desirable for a financially motivated attacker to obtain from a health insurance company?

Options :

A : Transaction logs

B : Intellectual property

C : PII/PHI

D : Network architecture

Answer: C

Question 3

Which of the following describes United States federal government cybersecurity policies and guidelines?

Options :

A : NIST

B : ANSI

C : NERC

D : GDPR

Answer: A

Question 4

Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?

Options :

A : Generating reports

B : Establishing scope

C : Conducting an audit

D : Assessing exposures

Answer: C

Question 5

While reviewing some audit logs, an analyst has identified consistent modifications to the sshd_config file for

an organization’s server. The analyst would like to investigate and compare contents of the current file with

archived versions of files that are saved weekly. Which of the following tools will be MOST effective during

the investigation?

Options :

A : cat * | cut –d ‘,’ –f 2,5,7

B : more * | grep

C : diff

D : sort *

Answer: C

Higher Test Marks with Free Online CFR-410 Exam Practice

Buying Options: