Logical Operations Logical Operations Certifications CFR-410 Questions & Answers

• Question 61:

  Which common source of vulnerability should be addressed to BEST mitigate against URL redirection attacks?

  A. Application

  B. Users

  C. Network infrastructure

  D. Configuration files

  Correct Answer: A

  Reference: https://blog.qualys.com/securitylabs/2016/01/07/open-redirection-a-simple-vulnerability-threatens-your-web-applications

• Question 62:

  Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?

  A. Disabling Windows Updates

  B. Disabling Windows Firewall

  C. Enabling Remote Registry

  D. Enabling Remote Desktop

  Correct Answer: D

• Question 63:

  During which phase of a vulnerability assessment would a security consultant need to document a requirement to retain a legacy device that is no longer supported and cannot be taken offline?

  A. Conducting post-assessment tasks

  B. Determining scope

  C. Identifying critical assets

  D. Performing a vulnerability scan

  Correct Answer: C

• Question 64:

  Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?

  A. Generating reports

  B. Establishing scope

  C. Conducting an audit

  D. Assessing exposures

  Correct Answer: C

  Reference: https://www.ogcio.gov.hk/en/our_work/information_cyber_security/government/doc/ISPG-SM01.pdf

• Question 65:

  Which of the following security best practices should a web developer reference when developing a new web-based application?

  A. Control Objectives for Information and Related Technology (COBIT)

  B. Risk Management Framework (RMF)

  C. World Wide Web Consortium (W3C)

  D. Open Web Application Security Project (OWASP)

  Correct Answer: D

• Question 66:

  Which of the following is the FIRST step taken to maintain the chain of custody in a forensic investigation?

  A. Security and evaluating the electronic crime scene.

  B. Transporting the evidence to the forensics lab

  C. Packaging the electronic device

  D. Conducting preliminary interviews

  Correct Answer: C

• Question 67:

  Which of the following are well-known methods that are used to protect evidence during the forensics process? (Choose three.)

  A. Evidence bags

  B. Lock box

  C. Caution tape

  D. Security envelope

  E. Secure rooms

  F. Faraday boxes

  Correct Answer: ACD

• Question 68:

  Which of the following could be useful to an organization that wants to test its incident response procedures without risking any system downtime?

  A. Blue team exercise

  B. Business continuity exercise

  C. Tabletop exercise

  D. Red team exercise

  Correct Answer: B

  Reference: https://www.gsma.com/mobilefordevelopment/wp-content/uploads/2017/11/Exercising-BC-Plans-for-Natural-Disasters-A-Quick-Guide-for-MNOs.pdf

• Question 69:

  A government organization responsible for critical infrastructure is being attacked and files on the server been deleted. Which of the following are the most immediate communications that should be made regarding the incident? (Choose two.)

  A. Notifying law enforcement

  B. Notifying the media

  C. Notifying a national compute emergency response team (CERT) or cybersecurity incident response team (CSIRT)

  D. Notifying the relevant vendor

  E. Notifying a mitigation expert

  Correct Answer: CE

• Question 70:

  A company that maintains a public city infrastructure was breached and information about future city projects was leaked. After the post-incident phase of the process has been completed, which of the following would be PRIMARY focus of the incident response team?

  A. Restore service and eliminate the business impact.

  B. Determine effective policy changes.

  C. Inform the company board about the incident.

  D. Contact the city police for official investigation.

  Correct Answer: B