Logical Operations Logical Operations Certifications CFR-410 Questions & Answers

• Question 11:

  After successfully enumerating the target, the hacker determines that the victim is using a firewall. Which of the following techniques would allow the hacker to bypass the intrusion prevention system (IPS)?

  A. Stealth scanning

  B. Xmas scanning

  C. FINS scanning

  D. Port scanning

  Correct Answer: C

  Reference: https://nmap.org/book/firewall-subversion.html

• Question 12:

  Which of the following, when exposed together, constitutes PII? (Choose two.)

  A. Full name

  B. Birth date

  C. Account balance

  D. Marital status

  E. Employment status

  Correct Answer: AC

  Reference: https://www.lifelock.com/learn-identity-theft-resources-what-is-personally-identifiable-information.html

• Question 13:

  An attacker intercepts a hash and compares it to pre-computed hashes to crack a password. Which of the following methods has been used?

  A. Password sniffing

  B. Brute force attack

  C. Rainbow tables

  D. Dictionary attack

  Correct Answer: C

  Reference: https://books.google.com.pk/books?id=knlkHAsKNRwCandpg=PA174andlpg=PA174anddq=attacker+intercepts+a+hash+and+compares+it+to+pre-computed+hashes+to+crack+a +passwordandsource=blandots=k8bSf5CPV7andsig=ACfU3U1ZagQatV8sP0-7-zS7RU_EsKoQAwandhl=enandsa=Xandved=2ahUKEwj_k6f-prbpAhUBBGMBHeQaCdwQ6AEwCXoECBMQAQ#v=onepageandq=attacker%20intercepts%20a%20hash% 20and%20compares%20it%20to%20pre-computed%20hashes%20to%20crack%20a%20passwordandf=false

• Question 14:

  As part of an organization's regular maintenance activities, a security engineer visits the Internet Storm Center advisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this to perform which of the following activities?

  A. Update the latest proxy access list

  B. Monitor the organization's network for suspicious traffic

  C. Monitor the organization's sensitive databases

  D. Update access control list (ACL) rules for network devices

  Correct Answer: D

• Question 15:

  Which of the following is an automated password cracking technique that uses a combination of uppercase and lowercase letters, 0-9 numbers, and special characters?

  A. Dictionary attack

  B. Password guessing

  C. Brute force attack

  D. Rainbow tables

  Correct Answer: C

  Reference: https://www.cloudways.com/blog/what-is-brute-force-attack/

• Question 16:

  During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

  A. Reconnaissance

  B. Scanning

  C. Gaining access

  D. Persistence

  Correct Answer: B

  Reference: https://blog.stealthbits.com/finding-microsoft-sql-server-targets-sql-attacks/

• Question 17:

  Which of the following is a method of reconnaissance in which a ping is sent to a target with the expectation of receiving a response?

  A. Active scanning

  B. Passive scanning

  C. Network enumeration

  D. Application enumeration

  Correct Answer: C

• Question 18:

  Which asset would be the MOST desirable for a financially motivated attacker to obtain from a health insurance company?

  A. Transaction logs

  B. Intellectual property

  C. PII/PHI

  D. Network architecture

  Correct Answer: C

• Question 19:

  A security professional discovers a new ransomware strain that disables antivirus on the endpoint during an infection. Which location would be the BEST place for the security professional to find technical information about this malware?

  A. Threat intelligence feeds

  B. Computer emergency response team (CERT) press releases

  C. Vulnerability databases

  D. Social network sites

  Correct Answer: A

  Reference: https://whatis.techtarget.com/definition/threat-intelligence-feed

• Question 20:

  A company has noticed a trend of attackers gaining access to corporate mailboxes. Which of the following would be the BEST action to take to plan for this kind of attack in the future?

  A. Scanning email server for vulnerabilities

  B. Conducting security awareness training

  C. Hardening the Microsoft Exchange Server

  D. Auditing account password complexity

  Correct Answer: A