Question 1

After a hacker obtained a shell on a Linux box, the hacker then sends the exfiltrated data via Domain NameSystem (DNS). This is an example of which type of data exfiltration?

Options :

A : Covert channels

B : File sharing services

C : Steganography

D : Rogue service

Answer: A

Question 2

Which asset would be the MOST desirable for a financially motivated attacker to obtain from a health insurance company?

Options :

A : Transaction logs

B : Intellectual property

C : PII/PHI

D : Network architecture

Answer: C

Question 3

As part of an organization’s regular maintenance activities, a security engineer visits the Internet Storm Centeradvisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this toperform which of the following activities?

Options :

A : Update the latest proxy access list

B : Monitor the organization’s network for suspicious traffic

C : Monitor the organization’s sensitive databases

D : Update access control list (ACL) rules for network devices

Answer: D

Question 4

Which of the following describes United States federal government cybersecurity policies and guidelines?

Options :

A : NIST

B : ANSI

C : NERC

D : GDPR

Answer: A

Question 5

Which common source of vulnerability should be addressed to BEST mitigate against URL redirection attacks?

Options :

A : Application

B : Users

C : Network infrastructure

D : Configuration files

Answer: A

Free CFR-410 Mock Exam – Practice Online Confidently

Buying Options: