Online Access Free CFR-410 Exam Questions

If an organization suspects criminal activity during the response to an incident, when should they notify law enforcement authorities?

• A.According to a pre-defined cost threshold.
• B.After one day of network downtime.
• C.After the criminal activity is confirmed.
• D.As soon as criminal activity is suspected.

Which of the following represents a front-end security capability that addresses cyber resiliency?

• A.Multi-factor authentication
• B.Key management
• C.Physical separation of backups
• D.Immutability of backups

An organization recently suffered a data breach involving a server that had Transmission Control Protocol (TCP) port 1433 inadvertently exposed to the Internet. Which of the following services was vulnerable?

• A.Internet Message Access Protocol (IMAP)
• B.Database
• C.Network Time Protocol (NTP)
• D.Network Basic Input/Output System (NetBIOS)

Senior management has stated that antivirus software must be installed on all employee workstations. Which of the following does this statement BEST describe?

• A.Policy
• B.Guideline
• C.Standard
• D.Procedure

If a hacker is attempting to alter or delete system audit logs, in which of the following attack phases is the hacker involved?

• A.Gaining persistence
• B.Expanding access
• C.Covering tracks
• D.Performing reconnaissance