CFR-410

Review 80 CFR-410 practice questions with answer explanations and community insights.

Question 1

A security analyst needs to capture network traffic from a compromised Mac host. They attempt to execute the tcpdump command using their general user account but continually receive an "Operation Not Permitted" error. Use of which of the following commands will allow the analyst to capture traffic using tcpdump successfully?

  1. sudo
  2. netstat
  3. chroot
  4. chmod
  5. lsof

Question 2

Which are successful Disaster Recovery Plan best practices options to be considered? (Choose three.)

  1. Isolate the services and data as much as possible.
  2. Back up to a NAS device that is attached 24 hours a day, 7 days a week.
  3. Understand which processes are critical to the business and have to run in disaster recovery.
  4. Maintain integrity between primary and secondary deployments.
  5. Store any data elements in the root storage that is used for root access for the workspace.

Question 3

Which concept involves having more than one person required to complete a task?

  1. Separation of duties
  2. Mandatory access control
  3. Discretionary access control
  4. Least privilege

Question 4

Which of the following regulations is most applicable to a public utility provider operating in the United States?

  1. GDPR
  2. NERC
  3. FISMA
  4. HIPAA

Question 5

Which approach to cybersecurity involves a series of defensive mechanisms that are layered to protect valuable data and information?

  1. Network segmentation
  2. Defense in depth
  3. Tiered security
  4. Endpoint detection and response