CFR-210

CFR-210 practice questions, page 3 of 4, with answer review and explanations.

Question 11

A malicious actor sends a crafted email to the office manager using personal information collected from social media. This type of social engineering attack is known as:

  1. spear phishing
  2. vishing
  3. phishing
  4. whaling

Question 12

A computer attacker has compromised a system by implanting a script that will send 10B packages over port 150. This port is also used for sending heartbeat messages to a central monitoring server. Which of the following BEST describes the tactic used to execute this attack?

  1. Covert channels
  2. Logic bomb
  3. Backdoors
  4. ICMP redirect

Question 13

Which of the following techniques allows probing firewall rule sets and finding entry points into a targeted system or network?

  1. Distributed checksum clearinghouse
  2. Firewall fingerprinting
  3. Network enumeration
  4. Packet crafting

Question 14

A security professional has been tasked with the protection of a specific set of information essential to a corporations livelihood, the exposure of which could cost the company billions of dollars in long-term revenue. The professional is interested in obtaining advice for preventing the theft of this type of information. Which of the following is the BEST resource for finding this material?

  1. Law enforcement information sharing groups
  2. National Threat Assessment Center
  3. Vendor web pages that provide intelligence feeds and advisories
  4. Blogs concerning the theft of PII

Question 15

When determining the threats/vulnerabilities to migrate, it is important to identify which are applicable. Which of the following is the FIRST step to determine applicability?

  1. Review online vulnerability database
  2. Limit and control network ports, protocols, and services.
  3. Continuously assess and remediate vulnerabilities.
  4. Conduct an assessment of the system infrastructure.