CCFR-201 Practice Test

CCFR-201 Practice Test practice questions, page 3 of 3, with answer review and explanations.

Question 11

What action is used when you want to save a prevention hash for later use?

  1. Always Block
  2. Never Block
  3. Always Allow
  4. No Action

Question 12

You receive an email from a third-party vendor that one of their services is compromised, the vendor names a specific IP address that the compromised service was using. Where would you input this indicator to find any activity related to this IP address?

  1. IP Addresses
  2. Remote or Network Logon Activity
  3. Remote Access Graph
  4. Hash Executions