1281 お客様のコメント
質問 1：
During a security investigation, a suspicious Linux laptop is found in the server room. The laptop is processing information and indicating network activity. The investigator is preparing to launch an investigation to determine what is happening with this laptop. Which of the following is the MOST appropriate set of Linux commands that should be executed to conduct the investigation?
A. iperf, traceroute, whois, ls, chown, cat
B. iperf, wget, traceroute, dc3dd, ls, whois
C. lsof, ifconfig, who, ps, ls, tcpdump
D. lsof, chmod, nano, whois, chown, ls
正解：B
質問 2：
During the forensic analysis of a compromised computer image, the investigator found that critical files are missing, caches have been cleared, and the history and event log files are empty. According to this scenario, which of the following techniques is the suspect using?
A. System hardening techniques
B. Anti-forensic techniques
C. System optimization techniques
D. Defragmentation techniques
正解：B
質問 3：
Which of the following attacks involves sending a large amount of spoofed User Datagram Protocol (UDP) traffic to a router's broadcast address within a network?
A. Smurf attack
B. Fraggle attack
C. Teardrop attack
D. Land attack
正解：A
質問 4：
After successfully enumerating the target, the hacker determines that the victim is using a firewall. Which of the following techniques would allow the hacker to bypass the intrusion prevention system (IPS)?
A. Stealth scanning
B. FINS scanning
C. Xmas scanning
D. Port scanning
正解：B
質問 5：
The incident response team has completed root cause analysis for an incident. Which of the following actions should be taken in the next phase of the incident response process? (Choose two.)
A. Updating policies and procedures
B. Providing a briefing to management
C. Drafting a recovery plan for the incident
D. Investigating responsible staff
E. Training staff for future incidents
正解：A,C
質問 6：
Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?
A. Disabling Windows Firewall
B. Enabling Remote Desktop
C. Disabling Windows Updates
D. Enabling Remote Registry
正解：B
質問 7：
A network administrator has determined that network performance has degraded due to excessive use of social media and Internet streaming services. Which of the following would be effective for limiting access to these types of services, without completely restricting access to a site?
A. Network segmentation
B. Blacklisting
C. Web content filtering
D. Whitelisting
正解：C
During a security investigation, a suspicious Linux laptop is found in the server room. The laptop is processing information and indicating network activity. The investigator is preparing to launch an investigation to determine what is happening with this laptop. Which of the following is the MOST appropriate set of Linux commands that should be executed to conduct the investigation?
A. iperf, traceroute, whois, ls, chown, cat
B. iperf, wget, traceroute, dc3dd, ls, whois
C. lsof, ifconfig, who, ps, ls, tcpdump
D. lsof, chmod, nano, whois, chown, ls
正解：B
質問 2：
During the forensic analysis of a compromised computer image, the investigator found that critical files are missing, caches have been cleared, and the history and event log files are empty. According to this scenario, which of the following techniques is the suspect using?
A. System hardening techniques
B. Anti-forensic techniques
C. System optimization techniques
D. Defragmentation techniques
正解：B
質問 3：
Which of the following attacks involves sending a large amount of spoofed User Datagram Protocol (UDP) traffic to a router's broadcast address within a network?
A. Smurf attack
B. Fraggle attack
C. Teardrop attack
D. Land attack
正解：A
質問 4：
After successfully enumerating the target, the hacker determines that the victim is using a firewall. Which of the following techniques would allow the hacker to bypass the intrusion prevention system (IPS)?
A. Stealth scanning
B. FINS scanning
C. Xmas scanning
D. Port scanning
正解：B
質問 5：
The incident response team has completed root cause analysis for an incident. Which of the following actions should be taken in the next phase of the incident response process? (Choose two.)
A. Updating policies and procedures
B. Providing a briefing to management
C. Drafting a recovery plan for the incident
D. Investigating responsible staff
E. Training staff for future incidents
正解：A,C
質問 6：
Which of the following would MOST likely make a Windows workstation on a corporate network vulnerable to remote exploitation?
A. Disabling Windows Firewall
B. Enabling Remote Desktop
C. Disabling Windows Updates
D. Enabling Remote Registry
正解：B
質問 7：
A network administrator has determined that network performance has degraded due to excessive use of social media and Internet streaming services. Which of the following would be effective for limiting access to these types of services, without completely restricting access to a site?
A. Network segmentation
B. Blacklisting
C. Web content filtering
D. Whitelisting
正解：C
石川** -
CFR-410問題集は図表が多く、丁寧でわかりやすい解説で理解しやすいです。