CFR-410 Free Practice Test

A web server is under a denial of service (DoS) attack. The administrator reviews logs and creates an access control list (ACL) to stop the attack. Which of the following technologies could perform these steps automatically in the future?

1. A. Intrusion prevention system (IPS)
2. B. Intrusion detection system (IDS)
3. C. Blacklisting
4. D. Whitelisting

Correct Answer: B

Which asset would be the MOST desirable for a financially motivated attacker to obtain from a health insurance company?

1. A. Transaction logs
2. B. Intellectual property
3. C. PII/PHI
4. D. Network architecture

Correct Answer: C

An organization recently suffered a breach due to a human resources administrator emailing employee names and Social Security numbers to a distribution list. Which of the following tools would help mitigate this risk from recurring?

1. A. Data loss prevention (DLP)
2. B. Firewall
3. C. Web proxy
4. D. File integrity monitoring

Correct Answer: A

A user receives an email about an unfamiliar bank transaction, which includes a link. When clicked, the link redirects the user to a web page that looks exactly like their bank’s website and asks them to log in with their username and password. Which type of attack is this?

1. A. Whaling
2. B. Smishing
3. C. Vishing
4. D. Phishing

Correct Answer: D

A company has noticed a trend of attackers gaining access to corporate mailboxes. Which of the following would be the BEST action to take to plan for this kind of attack in the future?

1. A. Scanning email server for vulnerabilities
2. B. Conducting security awareness training
3. C. Hardening the Microsoft Exchange Server
4. D. Auditing account password complexity

Correct Answer: A