Logical Operations Logical Operations Certifications CFR-410 Questions & Answers

• Question 51:

  A network security analyst has noticed a flood of Simple Mail Transfer Protocol (SMTP) traffic to internal clients. SMTP traffic should only be allowed to email servers. Which of the following commands would stop this attack? (Choose two.)

  A. iptables -A INPUT -p tcp –dport 25 -d x.x.x.x -j ACCEPT

  B. iptables -A INPUT -p tcp –sport 25 -d x.x.x.x -j ACCEPT

  C. iptables -A INPUT -p tcp –dport 25 -j DROP

  D. iptables -A INPUT -p tcp –destination-port 21 -j DROP

  E. iptables -A FORWARD -p tcp –dport 6881:6889 -j DROP

  Correct Answer: AC

• Question 52:

  Which of the following is susceptible to a cache poisoning attack?

  A. Domain Name System (DNS)

  B. Secure Shell (SSH)

  C. Hypertext Transfer Protocol Secure (HTTPS)

  D. Hypertext Transfer Protocol (HTTP)

  Correct Answer: A

  Reference: https://www.sciencedirect.com/topics/computer-science/cache-poisoning-attack

• Question 53:

  Which of the following are common areas of vulnerabilities in a network switch? (Choose two.)

  A. Default port state

  B. Default credentials

  C. Default protocols

  D. Default encryption

  E. Default IP address

  Correct Answer: AB

• Question 54:

  An automatic vulnerability scan has been performed. Which is the next step of the vulnerability assessment process?

  A. Hardening the infrastructure

  B. Documenting exceptions

  C. Assessing identified exposures

  D. Generating reports

  Correct Answer: D

  Reference: https://securityintelligence.com/a-step-by-step-guide-to-vulnerability-assessment/

• Question 55:

  An organization recently suffered a data breach involving a server that had Transmission Control Protocol (TCP) port 1433 inadvertently exposed to the Internet. Which of the following services was vulnerable?

  A. Internet Message Access Protocol (IMAP)

  B. Network Basic Input/Output System (NetBIOS)

  C. Database

  D. Network Time Protocol (NTP)

  Correct Answer: C

  Reference: http://www.princeton.edu/~rblee/ELE572Papers/Fall04Readings/DDoSSurveyPaper_20030516_Final.pdf (9)

• Question 56:

  Which of the following attacks involves sending a large amount of spoofed User Datagram Protocol (UDP) traffic to a router's broadcast address within a network?

  A. Land attack

  B. Fraggle attack

  C. Smurf attack

  D. Teardrop attack

  Correct Answer: C

  Reference: https://books.google.com.pk/books?id=rCx5OfSFUPkCandpg=RA7-PA8andlpg=RA7-PA8anddq=attacks+involves+sending+a+large+amount+of+spoofed+User+Datagram+Protocol+(UDP)+traffic+to+a+router%E2%80%99s+broadcast +address+within+a+networkandsource=blandots=aKV7j5UIQxandsig=ACfU3U0EkAK3nHXfUCJco5xVhckbtrT68wandhl=enandsa=Xandved=2ahUKEwjMlPWLz7bpAhUBrxoKHQNyAVoQ6AEwAHoECBUQAQ#v=onepageandq=attacks%20involves% 20sending%20a%20large%20amount%20of%20spoofed%20User%20Datagram%20Protocol%20(UDP)%20traffic%20to%20a%20router%E2%80%99s%20broadcast%20address%20within%20a%20networkandf=false

• Question 57:

  Which of the following are part of the hardening phase of the vulnerability assessment process? (Choose two.)

  A. Installing patches

  B. Updating configurations

  C. Documenting exceptions

  D. Conducting audits

  E. Generating reports

  Correct Answer: AB

• Question 58:

  To minimize vulnerability, which steps should an organization take before deploying a new Internet of Things (IoT) device? (Choose two.)

  A. Changing the default password

  B. Updating the device firmware

  C. Setting up new users

  D. Disabling IPv6

  E. Enabling the firewall

  Correct Answer: BE

• Question 59:

  The Key Reinstallation Attack (KRACK) vulnerability is specific to which types of devices? (Choose two.)

  A. Wireless router

  B. Switch

  C. Firewall

  D. Access point

  E. Hub

  Correct Answer: AE

  Reference: https://www.kaspersky.com/blog/krackattack/19798/

• Question 60:

  While planning a vulnerability assessment on a computer network, which of the following is essential? (Choose two.)

  A. Identifying exposures

  B. Identifying critical assets

  C. Establishing scope

  D. Running scanning tools

  E. Installing antivirus software

  Correct Answer: AC