CFR-210

CFR-210 practice questions, page 2 of 4, with answer review and explanations.

Question 6

Which of the following could an attacker use to perpetrate a social engineering attack? (Choose two.)

  1. Keylogger
  2. Yagi
  3. Company uniform
  4. Blackdoor
  5. Phone call

Question 7

During review of a companys web server logs, the following items are discovered: 2015-03-01 03:32:11 www.example.com/index.asp?id=-999 or 1=convert(int,@@version) 2015-03-01 03:35:33 www.example.com/index.asp?id=-999 or 1=convert(int,db_name()) 2015-03-01 03:38:25 www.example.com/index.asp?id=-999 or 1=convert(int,user_name()) Which of the following is depicted in the log example above?

  1. An administrator using the web interface for application maintenance
  2. Normal web application traffic
  3. A web application scan
  4. An attempt at enumeration via SQL injection

Question 8

An attacker has exfiltrated the SAM file from a Windows workstation. Which of the following attacks is MOST likely being perpetrated?

  1. user enumeration
  2. Brute forcing
  3. Password sniffing
  4. Hijacking/rooting

Question 9

Which of the following describes the MOST important reason for capturing post-attack metadata?

  1. To assist in updating the Business Continuity Plan
  2. To assist in writing a security magazine article
  3. To assist in fortification of defenses to prevent future attacks
  4. To assist in improving security awareness training

Question 10

Drag and drop the following steps to perform a successful social engineering attack in the correct order, from first (1) to last (6). Select and Place: