CFR-210: CyberSec First Responder - Free download from Exam Files

An attacker performs reconnaissance on a Chief Executive Officer (CEO) using publicity available resources to gain access to the CEO’s office. The attacker was in the CEO’s office for less than five minutes, and the attack left no traces in any logs, nor was there any readily identifiable cause for the exploit. The attacker in then able to use numerous credentials belonging to the CEO to conduct a variety of further attacks. Which of the following types of exploit is described?

Pivoting
Malicious linking
Whaling
Keylogging

Correct answer: C

Explanation:

Reference:http://searchsecurity.techtarget.com/definition/whaling

Which of the following is an automated password cracking technique that uses a combination of upper and lower case letters, 0-9 numbers, and special characters?

Dictionary attack
Password guessing
Brute force attack
Rainbow tables

Correct answer: C

Explanation:

Reference:https://www.password-depot.com/know-how/brute-force-attacks.htm

A zero-day vulnerability is discovered on a company’s network. The security analyst conducts a log review, schedules an immediate vulnerability scan, and quarantines the infected system, but cannot determine the root cause of the vulnerability. Which of the following is a source of information that can be used to identify the cause of the vulnerability?

www.virustotal.com
Security RSS feeds
Security software websites
Government websites

Correct answer: C

Explanation:

Reference:http://security.stackexchange.com/questions/47097/how-are-zero-days-found

The Chief Information Officer (CIO) of a company asks the incident responder to update the risk management plan.

Which of the following methods can BEST help the incident responder identify the risks that require in-depth analysis?

Qualitative analysis
Targeted risk analysis
Non-targeted risk analysis
Quantitative analysis

Correct answer: D

Explanation:

Reference:https://www.passionatepm.com/blog/qualitative-risk-analysis-vs-quantitative-risk-analysis-pmp-concept-1

A security analyst for a financial services firm is monitoring blogs and reads about a zero-day vulnerability being exploited by a little-known group of hackers. The analyst wishes to independently validate and corroborate the blog’s posting. Which of the following sources of information will provide the MOST credible supporting threat intelligence in this situation?

Similar cybersecurity blogs
Threat intelligence sharing groups
Computer emergency response team press release
Internet searches on zero-day exploits

Correct answer: C

Explanation:

Reference:http://whatis.techtarget.com/definition/CERT-Computer-Emergency-Readiness-Team

Which of the following could an attacker use to perpetrate a social engineering attack? (Choose two.)

Keylogger
Yagi
Company uniform
Blackdoor
Phone call

Correct answer: AE

During review of a company’s web server logs, the following items are discovered:

2015-03-01 03:32:11 www.example.com/index.asp?id=-999 or 1=convert(int,@@version)—

2015-03-01 03:35:33 www.example.com/index.asp?id=-999 or 1=convert(int,db_name())—

2015-03-01 03:38:25 www.example.com/index.asp?id=-999 or 1=convert(int,user_name())—

Which of the following is depicted in the log example above?

An administrator using the web interface for application maintenance
Normal web application traffic
A web application scan
An attempt at enumeration via SQL injection

Correct answer: D

Explanation:

Reference:http://blog.gojhonny.com/2013/08/sql-injection-database-enumeration-notes.html

An attacker has exfiltrated the SAM file from a Windows workstation. Which of the following attacks is MOST likely being perpetrated?

user enumeration
Brute forcing
Password sniffing
Hijacking/rooting

Correct answer: C

Explanation:

Reference:http://hackersonlineclub.com/to-hack-window-passwords/

Which of the following describes the MOST important reason for capturing post-attack metadata?

To assist in updating the Business Continuity Plan
To assist in writing a security magazine article
To assist in fortification of defenses to prevent future attacks
To assist in improving security awareness training

Correct answer: C

Drag and drop the following steps to perform a successful social engineering attack in the correct order, from first (1) to last (6).

Correct answer: To work with this question, an Exam Simulator is required.

Vendor:	Logical Operations
Exam Code:	CFR-210
Exam Name:	CyberSec First Responder
Date:	Dec 18, 2017
File Size:	3 MB

Download CyberSec First Responder.CFR-210.CertDumps.2017-12-18.100q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown