CFR-310

CFR-310 practice questions, page 3 of 4, with answer review and explanations.

Question 11

A cybersecurity expert assigned to be the IT manager of a middle-sized company discovers that there is little endpoint security implementation on the company’s systems. Which of the following could be included in an endpoint security solution? (Choose two.)

  1. Web proxy
  2. Network monitoring system
  3. Data loss prevention (DLP)
  4. Anti-malware
  5. Network Address Translation (NAT)

Question 12

During a security investigation, a suspicious Linux laptop is found in the server room. The laptop is processing information and indicating network activity. The investigator is preparing to launch an investigation to determine what is happening with this laptop. Which of the following is the MOST appropriate set of Linux commands that should be executed to conduct the investigation?

  1. iperf, traceroute, whois, ls, chown, cat
  2. iperf, wget, traceroute, dc3dd, ls, whois
  3. lsof, chmod, nano, whois, chown, ls
  4. lsof, ifconfig, who, ps, ls, tcpdump

Question 13

A security analyst is required to collect detailed network traffic on a virtual machine. Which of the following tools could the analyst use?

  1. nbtstat
  2. WinDump
  3. fport
  4. netstat

Question 14

After a security breach, a security consultant is hired to perform a vulnerability assessment for a company’s web application. Which of the following tools would the consultant use?

  1. Nikto
  2. Kismet
  3. tcpdump
  4. Hydra

Question 15

When performing an investigation, a security analyst needs to extract information from text files in a Windows operating system. Which of the following commands should the security analyst use?

  1. findstr
  2. grep
  3. awk
  4. sigverif