CFR-310

CFR-310 practice questions, page 4 of 4, with answer review and explanations.

Question 16

Which of the following does the command nmap –open 10.10.10.3 do?

  1. Execute a scan on a single host, returning only open ports.
  2. Execute a scan on a subnet, returning detailed information on open ports.
  3. Execute a scan on a subnet, returning all hosts with open ports.
  4. Execute a scan on a single host, returning open services.

Question 17

A web server is under a denial of service (DoS) attack. The administrator reviews logs and creates an access control list (ACL) to stop the attack. Which of the following technologies could perform these steps automatically in the future?

  1. Intrusion prevention system (IPS)
  2. Intrusion detection system (IDS)
  3. Blacklisting
  4. Whitelisting

Question 18

An organization recently suffered a breach due to a human resources administrator emailing employee names and Social Security numbers to a distribution list. Which of the following tools would help mitigate this risk from recurring?

  1. Data loss prevention (DLP)
  2. Firewall
  3. Web proxy
  4. File integrity monitoring

Question 19

An incident responder was asked to analyze malicious traffic. Which of the following tools would be BEST for this?

  1. Hex editor
  2. tcpdump
  3. Wireshark
  4. Snort

Question 20

A network administrator has determined that network performance has degraded due to excessive use of social media and Internet streaming services. Which of the following would be effective for limiting access to these types of services, without completely restricting access to a site?

  1. Whitelisting
  2. Web content filtering
  3. Network segmentation
  4. Blacklisting