Online Access Free CFR-310 Practice Test

While planning a vulnerability assessment on a computer network, which of the following is essential?
(Choose two.)

• A.Identifying critical assets
• B.Establishing scope
• C.Identifying exposures
• D.Running scanning tools
• E.Installing antivirus software

Which of the following are legally compliant forensics applications that will detect an alternative data stream (ADS) or a file with an incorrect file extension? (Choose two.)

• A.EnCase
• B.Write blocker
• C.Forensic Toolkit (FTK)
• D.dd
• E.Disk duplicator

A user receives an email about an unfamiliar bank transaction, which includes a link. When clicked, the link redirects the user to a web page that looks exactly like their bank's website and asks them to log in with their username and password. Which type of attack is this?

• A.Smishing
• B.Vishing
• C.Phishing
• D.Whaling

During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

• A.Scanning
• B.Reconnaissance
• C.Persistence
• D.Gaining access

As part of an organization's regular maintenance activities, a security engineer visits the Internet Storm Center advisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this to perform which of the following activities?

• A.Update access control list (ACL) rules for network devices
• B.Monitor the organization's sensitive databases
• C.Monitor the organization's network for suspicious traffic
• D.Update the latest proxy access list