Question 1

After a hacker obtained a shell on a Linux box, the hacker then sends the exfiltrated data via Domain NameSystem (DNS). This is an example of which type of data exfiltration?

Options :

A : Covert channels

B : File sharing services

C : Steganography

D : Rogue service

Answer: A

Question 2

Which of the following, when exposed together, constitutes PII? (Choose two.)

Options :

A : Full name

B : Birth date

C : Account balance

D : Marital status

E : Employment status

Answer: A,C

Question 3

Various logs are collected for a data leakage case to make a forensic analysis. Which of the following areMOST important for log integrity? (Choose two.)

Options :

A : Hash value

B : Time stamp

C : Log type

D : Modified date/time

E : Log path

Answer: A,B

Question 4

Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?

Options :

A : Generating reports

B : Establishing scope

C : Conducting an audit

D : Assessing exposures

Answer: C

Question 5

As part of an organization’s regular maintenance activities, a security engineer visits the Internet Storm Centeradvisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this toperform which of the following activities?

Options :

A : Update the latest proxy access list

B : Monitor the organization’s network for suspicious traffic

C : Monitor the organization’s sensitive databases

D : Update access control list (ACL) rules for network devices

Answer: D

Free CFR-410 Mock Exam – Practice Online Confidently

Buying Options: