CFR-410

CFR-410 practice questions, page 3 of 4, with answer review and explanations.

Question 11

Which three disk image formats are used for evidence collection and preservation? (Choose three.)

  1. RAW(DD)
  2. E01
  3. AFF
  4. APFS
  5. EXT4

Question 12

An organization was recently hit with a ransomware attack that encrypted critical documents and files that were stored on the corporate file server. Which of the following provides the organization with the BEST chance for recovering their data?

  1. Application whitelisting
  2. Antivirus software
  3. Paying the ransom
  4. Offsite backups

Question 13

What are three benefits of security logging and monitoring? (Choose three.)

  1. Feeding intrusion detection systems
  2. Satisfying regulatory compliance requirements
  3. Data collection
  4. Forensic analysis and investigations
  5. Penetration testing

Question 14

Which of the following are components of Security Content Automation Protocol (SCAP)?

  1. CVM, NVD, and OSVDB
  2. CVE, CVSS, and OSVDB
  3. CVE, CVSS, and OVAL
  4. CWE, CWSS, and OVAL

Question 15

During recovery from an incident, which three options should a company focus on? (Choose three.)

  1. Evaluating the success of the current incident response plan
  2. Ensuring proper notifications have been made
  3. Providing details of the breach to media
  4. Identifying the responsible parties
  5. Restoring system and network connectivity
  6. Determining the financial impact of the breach