CertNexus CyberSec First Responder (CFR-410) Free Practice Test
Question 1
A system administrator has been tasked with developing highly detailed instructions for patching managed assets using the corporate patch management solution. These instructions are an example of which of the following?
Correct Answer: B
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 2
During an audit, an organization's ability to establish key performance indicators for its service hosting solution is discovered to be weak. What could be the cause of this?
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 3
Which of the following is considered a weakness or gap in a security program that can be exploited to gain unauthorized access?
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 4
Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?
Correct Answer: C
Question 5
Which of the following is susceptible to a cache poisoning attack?
Correct Answer: A
Question 6
In which of the following attack phases would an attacker use Shodan?
Correct Answer: A
Question 7
A Windows system administrator has received notification from a security analyst regarding new malware that executes under the process name of "armageddon.exe" along with a request to audit all department workstations for its presence. In the absence of GUI-based tools, what command could the administrator execute to complete this task?
Correct Answer: B
Question 8
What is the correct order of the DFIR phases?
Correct Answer:
Explanation:
The image you uploaded outlines a set of terms related to incident response. To arrange them in the correct order of Digital Forensics and Incident Response (DFIR) phases, the proper sequence is:
* Preparation
* Identification
* Containment
* Eradication
* Recovery
* Lessons Learned
Question 9
Which concept involves having more than one person required to complete a task?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 10
What is baseline security?
Correct Answer: B
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 11
A system administrator pulls records from a database that only requires the use of their general user vs.
domain admin account. Use of the general user account demonstrates which of the following concepts?
domain admin account. Use of the general user account demonstrates which of the following concepts?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 12
Which of the following, when exposed together, constitutes PII? (Choose two.)
Correct Answer: A,D
Question 13
During an incident, the following actions have been taken:
-Executing the malware in a sandbox environment
-Reverse engineering the malware
-Conducting a behavior analysis
Based on the steps presented, which of the following incident handling processes has been taken?
-Executing the malware in a sandbox environment
-Reverse engineering the malware
-Conducting a behavior analysis
Based on the steps presented, which of the following incident handling processes has been taken?
Correct Answer: B
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).