Question 1

While reviewing some audit logs, an analyst has identified consistent modifications to the sshd_config file for

an organization’s server. The analyst would like to investigate and compare contents of the current file with

archived versions of files that are saved weekly. Which of the following tools will be MOST effective during

the investigation?

Options :

A : cat * | cut –d ‘,’ –f 2,5,7

B : more * | grep

C : diff

D : sort *

Answer: C

Question 2

Which of the following are common areas of vulnerabilities in a network switch? (Choose two.)

Options :

A : Default port state

B : Default credentials

C : Default protocols

D : Default encryption

E : Default IP address

Answer: A,B

Question 3

Which of the following, when exposed together, constitutes PII? (Choose two.)

Options :

A : Full name

B : Birth date

C : Account balance

D : Marital status

E : Employment status

Answer: A,C

Question 4

As part of an organization’s regular maintenance activities, a security engineer visits the Internet Storm Center

advisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this to

perform which of the following activities?

Options :

A : Update the latest proxy access list

B : Monitor the organization’s network for suspicious traffic

C : Monitor the organization’s sensitive databases

D : Update access control list (ACL) rules for network devices

Answer: D

Question 5

Which of the following describes United States federal government cybersecurity policies and guidelines?

Options :

A : NIST

B : ANSI

C : NERC

D : GDPR

Answer: A

Higher Test Marks with Free Online CFR-410 Exam Practice