Question 1

Which of the following describes United States federal government cybersecurity policies and guidelines?

Options :

A : NIST

B : ANSI

C : NERC

D : GDPR

Answer: A

Question 2

After a hacker obtained a shell on a Linux box, the hacker then sends the exfiltrated data via Domain NameSystem (DNS). This is an example of which type of data exfiltration?

Options :

A : Covert channels

B : File sharing services

C : Steganography

D : Rogue service

Answer: A

Question 3

Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?

Options :

A : Generating reports

B : Establishing scope

C : Conducting an audit

D : Assessing exposures

Answer: C

Question 4

While reviewing some audit logs, an analyst has identified consistent modifications to the sshd_config file foran organization’s server. The analyst would like to investigate and compare contents of the current file witharchived versions of files that are saved weekly. Which of the following tools will be MOST effective duringthe investigation?

Options :

A : cat * | cut –d ‘,’ –f 2,5,7

B : more * | grep

C : diff

D : sort *

Answer: C

Question 5

Which of the following, when exposed together, constitutes PII? (Choose two.)

Options :

A : Full name

B : Birth date

C : Account balance

D : Marital status

E : Employment status

Answer: A,C

Free CFR-410 Mock Exam – Practice Online Confidently

Buying Options: