Question 1

While reviewing some audit logs, an analyst has identified consistent modifications to the sshd_config file foran organization’s server. The analyst would like to investigate and compare contents of the current file witharchived versions of files that are saved weekly. Which of the following tools will be MOST effective duringthe investigation?

Options :

A : cat * | cut –d ‘,’ –f 2,5,7

B : more * | grep

C : diff

D : sort *

Answer: C

Question 2

Various logs are collected for a data leakage case to make a forensic analysis. Which of the following areMOST important for log integrity? (Choose two.)

Options :

A : Hash value

B : Time stamp

C : Log type

D : Modified date/time

E : Log path

Answer: A,B

Question 3

Which of the following describes United States federal government cybersecurity policies and guidelines?

Options :

A : NIST

B : ANSI

C : NERC

D : GDPR

Answer: A

Question 4

As part of an organization’s regular maintenance activities, a security engineer visits the Internet Storm Centeradvisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this toperform which of the following activities?

Options :

A : Update the latest proxy access list

B : Monitor the organization’s network for suspicious traffic

C : Monitor the organization’s sensitive databases

D : Update access control list (ACL) rules for network devices

Answer: D

Question 5

Network infrastructure has been scanned and the identified issues have been remediated. What is the next step in the vulnerability assessment process?

Options :

A : Generating reports

B : Establishing scope

C : Conducting an audit

D : Assessing exposures

Answer: C

Free CFR-410 Mock Exam – Practice Online Confidently

Buying Options: