Online Access Free CFR-410 Practice Test

ABC Company uses technical compliance tests to verify that its IT systems are configured according to organizational information security policies, standards, and guidelines. Which two tools and controls can ABC Company use to verify that its IT systems are configured accordingly? (Choose two.)

• A.Performing Vulnerability Assessments and Penetration Testing
• B.Implementing Automated Human Resource Procedures
• C.Implementing Baseline Configuration Security Controls
• D.Implementing Automated Key Management Procedures

A forensic analyst has been tasked with analyzing disk images with file extensions such as .001, .002, etc.
Which of the following disk imaging tools was MOST LIKELY used to create these image files?

• A.FTK
• B.Encase
• C.SIFT
• D.dd
• E.ExifTool

An organization wants to deploy a network security tool to alert them but not block malicious activity and network traffic. Which of the following tools would BEST meet the organization's needs?

• A.IPS
• B.Firewall
• C.IDS
• D.EDR

A security administrator needs to review events from different systems located worldwide. Which of the following is MOST important to ensure that logs can be effectively correlated?

• A.Logs should include the physical location of the action performed.
• B.Logs should contain the username of the user performing the action.
• C.Logs should be synchronized to their local time zone.
• D.Logs should be synchronized to a common, predefined time source.

Which of the following are part of the hardening phase of the vulnerability assessment process? (Choose two.)

• A.Installing patches
• B.Updating configurations
• C.Conducting audits
• D.Documenting exceptions
• E.Generating reports