CertNexus CyberSec First Responder (CFR) - CFR-310 模擬練習
An incident responder was asked to analyze malicious traffic. Which of the following tools would be BEST for this?
正解: D
A security investigator has detected an unauthorized insider reviewing files containing company secrets.
Which of the following commands could the investigator use to determine which files have been opened by this user?
Which of the following commands could the investigator use to determine which files have been opened by this user?
正解: C
Various logs are collected for a data leakage case to make a forensic analysis. Which of the following are MOST important for log integrity? (Choose two.)
正解: A,B
According to company policy, all accounts with administrator privileges should have suffix _ja. While reviewing Windows workstation configurations, a security administrator discovers an account without the suffix in the administrator's group. Which of the following actions should the security administrator take?
正解: A
Which of the following data sources could provide indication of a system compromise involving the exfiltration of data to an unauthorized destination?
正解: D
Which of the following are well-known methods that are used to protect evidence during the forensics process? (Choose three.)
正解: A,C,D
When performing an investigation, a security analyst needs to extract information from text files in a Windows operating system. Which of the following commands should the security analyst use?
正解: C
As part of an organization's regular maintenance activities, a security engineer visits the Internet Storm Center advisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this to perform which of the following activities?
正解: A
During an incident, the following actions have been taken:
-Executing the malware in a sandbox environment
-Reverse engineering the malware
-Conducting a behavior analysis
Based on the steps presented, which of the following incident handling processes has been taken?
-Executing the malware in a sandbox environment
-Reverse engineering the malware
-Conducting a behavior analysis
Based on the steps presented, which of the following incident handling processes has been taken?
正解: A
解説: (PassTest メンバーにのみ表示されます)
Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?
正解: A