CFR-410

CFR-410 practice questions, page 2 of 4, with answer review and explanations.

Question 6

Vulnerability scanners generally classify vulnerabilities by which of the following? (Choose two.)

  1. Exploit range
  2. Costs
  3. Severity level
  4. Zero days
  5. Threat modeling

Question 7

Which standard was implemented in the United States to protect the privacy of patient medical information through restricted access to medical records and regulations for sharing medical records?

  1. NIST
  2. GLBA
  3. SOX
  4. HIPAA

Question 8

Which answer option is a tactic of social engineering in which an attacker engages in an attack performed by phone?

  1. Smishing
  2. Pretexting
  3. Vishing
  4. Phishing

Question 9

Which three answer options are password attack methods and techniques? (Choose three.)

  1. Cross-Site Scripting attack
  2. Brute force attack
  3. Man-in-the-middle attack
  4. Hybrid attack
  5. Dictionary attack

Question 10

What describes the BEST approach for developing a plan to continuously assess and track vulnerabilities on all organizational assets and infrastructure in order to remediate and minimize the opportunity for attacks?

  1. Establish and maintain a risk-based remediation strategy.
  2. Establish and maintain detailed enterprise asset inventory.
  3. Establish and maintain a data classification scheme.
  4. Establish and maintain a data management process.