Logical Operations CFR-210 CFR Exam Practice Test Instant Access

Question 1

Which of the following technologies is used as mitigation to XSS attacks?

AIntrusion prevention

BProxy filtering

CWeb application firewall

DIntrusion detection

Answer : C

Question 2

A logfile generated from a Windows server was moved to a Linux system for further analysis. A system administrator is now making edits to the file with vi and notices the file contains numerous instances of Ctrl-M (^M) characters. Which of the following command line tools is the administrator MOST likely to use to remove these characters from the logfile? (Choose two.)

Atr

Bcut

Ccat

Dunix2dos

Eawk

Answer : A, C

Question 3

While reviewing some audit logs, an analyst has identified consistent modification of the sshd_config file for an organization's server. The analyst would like to investigate and compare contents of the current file with archived versions of files that are saved weekly. Which of the following tools will be MOST effective during the investigation?

Acat <beginning of filename>* | cut --d ',' --f 2,5,7

Bmore <beginning of filename>* | grep <string of characters>

Cdiff <filename> <filename 2>

Dsort <beginning of filename>*

Answer : B

Question 4

Which of the following commands should be used to print out ONLY the second column of items in the following file?

Source_File,txt

Alpha Whiskey

Bravo Tango

Charlie Foxtrot

Echo Oscar

Delta Roger

Acut --d '' '' --f2 source_file.txt

Bcut --b7-15 source_file.txt

Ccut --d '' '' --f2 Source_File.txt

Dcut --c6-12 Source_File.txt

Answer : D

Question 5

An incident responder needs to quickly locate specific data in a large data repository. Which of the following Linux tool should be used?

Acat

Bfind

Cgrep

Dman

Answer : C

Question 6

Which of the following is the reason that out-of-band communication is used during a security incident?

AThe SMTP server may be compromised.

BThe incident response systems may be busy.

COther communication methods are unreliable.

DAn attacker could be monitoring network traffic.

Answer : C

Question 7

During the course of an investigation, an incident responder discovers illegal material on a user's hard drive. Which of the following is the incident responder's MOST important next step?

ANotify management

BPlace the hard drive in an evidence bag

CImage the hard drive

DRestrict the user's access

Answer : A

Logical Operations CFR-210 Certified CyberSec First Responder CFR Exam Practice Test