CFR-210試験無料問題集「Logical Operations CyberSec First Responder 認定」

A computer attacker has compromised a system by implanting a script that will send 10B packages over
port 150. This port is also used for sending heartbeat messages to a central monitoring server.
Which of the following BEST describes the tactic used to execute this attack?

A malicious attacker has compromised a database by implementing a Python-based script that will automatically establish an SSH connection daily between the hours of 2:00am and 5:00am.
Which of the following is the MOST common motive for the attack vector that was used?

A company website was hacked via the SQL query below:

Which of the following did the hackers perform?

An alert has been triggered identifying a new application running on a Windows server. Which of the
following tools can be used to identify the application? (Choose two.)

A security analyst for a financial services firm is monitoring blogs and reads about a zero-day vulnerability
being exploited by a little-known group of hackers. The analyst wishes to independently validate and
corroborate the blog's posting. Which of the following sources of information will provide the MOST
credible supporting threat intelligence in this situation?

As part of an incident response effort, data has been collected and analyzed, and a malware infection has
been contained . Which of the following is the NEXT step the incident response team should take within
the incident response process?

A suspicious laptop is found in a datacenter. The laptop is on and processing data, although there is no application open on the screen.
Which of the following BEST describes a Windows tool and technique that an investigator should use to analyze the laptop's RAM for working applications?

An organization needs to determine of any systems on its network (10.0.25.0/24) have web services
running on port 80 or 443. Which of the following is the BEST command to do this?

Which of the following can hackers use to gain access to a system over the network without knowing the
actual password?

A security analyst discovers a zero-day vulnerability affecting Windows, which has not been publicly
identified. The security analyst assumes this vulnerability is present on millions of computer system and
feels an obligation to share this information with other security professionals. Which of the following would
be the MOST adverse consequences of the analyst sharing this information?