CFR-210 試験問題を無料オンラインアクセス

Network engineering has reported low bandwidth during working hours. The incident response team is
currently investigating several anomalous activities that may be related . Which of the following is the
MOST appropriate method to further investigate this problem?

• A.Penetration testing and port scanning
• B.Imaging hard disk drives of computers on the network
• C.Capturing network traffic and packet analysis
• D.Collecting and analyzing computer logs

Which of the following resources BEST supports malware analysis?

• A.Internet service providers
• B.Government websites
• C.Internal network management team
• D.Crowdsourced intelligence feed

A company website was hacked via the SQL query below:

Which of the following did the hackers perform?

• A.Performed an XSS attack
• B.Cleared tracks of [email protected] entries
• C.Deleted the email password and login details
• D.Deleted the entire members table

An incident responder suspects that a host behind a firewall is infected with malware. Which of the
following should the responder use to find the IP address of the infected machine?

• A.DNS cache
• B.CAM cable
• C.NAT table
• D.ARP cache

Which of the following is the BEST way to capture all network traffic between hosts on a segmented
network?

• A.Firewall
• B.HIPS
• C.Router
• D.Protocol analyzer