CFR-410 試験問題を無料オンラインアクセス

A company is reviewing the results of the Nikto scan, and they determined that several internal web servers (likely associated with internal web applications) have a number of vulnerabilities. They also noticed several servers that have returned click-jacking vulnerabilities. Which option should be used to remediate this issue?

• A.Modify the SSL cipher configuration.
• B.Modify the HTTP X-Frame-Options.
• C.Upgrade the SSL version.
• D.Update the SSL server certificate.

What are three examples of incident response? (Choose three.)

• A.Dealing with systems that are suspected to be used to commit a crime
• B.Threat Modeling
• C.Collecting data from computer media
• D.Analyzing a system
• E.Dealing with systems suspected to be the victim of a crime

Tcpdump is a tool that can be used to detect which of the following indicators of compromise?

• A.Unknown use of protocols
• B.Unknown open ports
• C.Unusual network traffic
• D.Poor network performance

A security administrator is investigating a compromised host. Which of the following commands could the investigator use to display executing processes in real time?

• A.pstree
• B.ps
• C.nice
• D.top

What is the primary role of an intrusion detection system (IDS) on a network?

• A.Detection of network vulnerabilities
• B.Detection of system failures
• C.Detection of possible threats
• D.Blocking malicious packets