CFR-210

Review 80 CFR-210 practice questions with answer explanations and community insights.

Question 1

An attacker performs reconnaissance on a Chief Executive Officer (CEO) using publicity available resources to gain access to the CEOs office. The attacker was in the CEOs office for less than five minutes, and the attack left no traces in any logs, nor was there any readily identifiable cause for the exploit. The attacker in then able to use numerous credentials belonging to the CEO to conduct a variety of further attacks. Which of the following types of exploit is described?

  1. Pivoting
  2. Malicious linking
  3. Whaling
  4. Keylogging

Question 2

Which of the following is an automated password cracking technique that uses a combination of upper and lower case letters, 0-9 numbers, and special characters?

  1. Dictionary attack
  2. Password guessing
  3. Brute force attack
  4. Rainbow tables

Question 3

A zero-day vulnerability is discovered on a companys network. The security analyst conducts a log review, schedules an immediate vulnerability scan, and quarantines the infected system, but cannot determine the root cause of the vulnerability. Which of the following is a source of information that can be used to identify the cause of the vulnerability?

  1. www.virustotal.com
  2. Security RSS feeds
  3. Security software websites
  4. Government websites

Question 4

The Chief Information Officer (CIO) of a company asks the incident responder to update the risk management plan. Which of the following methods can BEST help the incident responder identify the risks that require in-depth analysis?

  1. Qualitative analysis
  2. Targeted risk analysis
  3. Non-targeted risk analysis
  4. Quantitative analysis

Question 5

A security analyst for a financial services firm is monitoring blogs and reads about a zero-day vulnerability being exploited by a little-known group of hackers. The analyst wishes to independently validate and corroborate the blogs posting. Which of the following sources of information will provide the MOST credible supporting threat intelligence in this situation?

  1. Similar cybersecurity blogs
  2. Threat intelligence sharing groups
  3. Computer emergency response team press release
  4. Internet searches on zero-day exploits
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.