Online Access Free CFR-210 Exam Questions

Which of the following types of logs is shown below, and what can be discerned from its contents?
2 015-07-19 12:33:31 reject UDP 146.64.21.212 192.141.173.72 1234 80
2 015-07-19 12:33:31 reject UDP 166.32.22.12 192.141.173.72 1234 80
2 015-07-19 12:33:31 reject UDP 123.56.71.145 192.141.173.72 1234 80
2 015-07-19 12:33:31 reject UDP 146.64.21.212 192.141.173.72 1234 80
2 015-07-19 12:33:32 reject UDP 166.32.22.12 192.141.173.72 1234 80
2 015-07-19 12:33:32 reject UDP 123.56.71.145 192.141.173.72 1234 80
2 015-07-19 12:33:32 reject UDP 146.64.21.212 192.141.173.72 1234 80
2 015-07-19 12:33:33 reject UDP 166.32.22.12 192.141.173.72 1234 80
2 015-07-19 12:33:33 reject UDP 123.56.71.145 192.141.173.72 1234 80
2 015-07-19 12:33:33 reject UDP 146.64.21.212 192.141.173.72 1234 80
2 015-07-19 12:33:34 reject UDP 166.32.22.12 192.141.173.72 1234 80
2 015-07-19 12:33:34 reject UDP 123.56.71.145 192.141.173.72 1234 80
2 015-07-19 12:33:34 reject UDP 146.64.21.212 192.141.173.72 1234 80
2 015-07-19 12:33:35 reject UDP 166.32.22.12 192.141.173.72 1234 80
2 015-07-19 12:33:35 reject UDP 123.56.71.145 192.141.173.72 1234 80

• A.Proxy log showing a possible DoS attack
• B.Firewall log showing a possible web server attack
• C.Firewall log showing a possible DoS attack
• D.Proxy log showing a possible web server attack

A SOC analyst has been tasked with checking all files in every employee home directory for any mention
of a new product code named PitViper. Which of the following commands will return all requested data?

• A.grep -r -i "pitviper" /home
• B.grep -r -v "pitviper" /home
• C.grep -i "pitviper" /home
• D.grep -r "PitViper" /home

During a malware outbreak, a security analyst has been asked to capture network traffic in hourly
increments for analysis by the incident response team . Which of the following tcpdump commands would
generate hourly pcap files?

• A.tcpdump -nn -i eth0 -w output.pcap -G 3600 -W 14
• B.tcpdump -nn -i eth0 -w output.pcap -c 100 -W 10
• C.tcpdump -nn -i eth0 -w output.pcap
• D.tcpdump -nn -i eth0 -w output.pcap -W 24

A malicious actor sends a crafted email to the office manager using personal information collected from
social media. This type of social engineering attack is known as:

• A.whaling
• B.phishing
• C.vishing
• D.spear phishing

A malware analyst has been assigned the task of reverse engineering malicious code. To conduct the
analysis safely, which of the following could the analyst implement?

• A.Honeypot
• B.Lock box
• C.Sandbox
• D.VLAN