Question 1

Which common source of vulnerability should be addressed to BEST mitigate against URL redirection attacks?

Options :

A : Application

B : Users

C : Network infrastructure

D : Configuration files

Answer: A

Question 2

While reviewing some audit logs, an analyst has identified consistent modifications to the sshd_config file foran organization’s server. The analyst would like to investigate and compare contents of the current file witharchived versions of files that are saved weekly. Which of the following tools will be MOST effective duringthe investigation?

Options :

A : cat * | cut –d ‘,’ –f 2,5,7

B : more * | grep

C : diff

D : sort *

Answer: C

Question 3

As part of an organization’s regular maintenance activities, a security engineer visits the Internet Storm Centeradvisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this toperform which of the following activities?

Options :

A : Update the latest proxy access list

B : Monitor the organization’s network for suspicious traffic

C : Monitor the organization’s sensitive databases

D : Update access control list (ACL) rules for network devices

Answer: D

Question 4

Which of the following are common areas of vulnerabilities in a network switch? (Choose two.)

Options :

A : Default port state

B : Default credentials

C : Default protocols

D : Default encryption

E : Default IP address

Answer: A,B

Question 5

Which of the following, when exposed together, constitutes PII? (Choose two.)

Options :

A : Full name

B : Birth date

C : Account balance

D : Marital status

E : Employment status

Answer: A,C

Free CFR-410 Mock Exam – Practice Online Confidently

Buying Options: