Logical Operations CFR-210 CFR Practice Questions| TestInsights

Question 1

Which of the following is the BEST way to capture all network traffic between hosts on a segmented network?

AHIPS

BFirewall

CRouter

DProtocol analyzer

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AHIPS

BFirewall

CRouter

DProtocol analyzer

Question 2

Customers are reporting issues connecting to a company's Internet server. Which of the following device logs should a technician review in order to help identify the issue?

AWIPS

BSSH

CWAP

DWAF

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AWIPS

BSSH

CWAP

DWAF

Question 3

An unauthorized network scan may be detected by parsing network sniffer data for:

AIPtraffic from a single IP address to multiple IP addresses.

BIP traffic from a single IP address to a single IP address.

CIP traffic from multiple IP addresses to a single IP address.

DIP traffic from multiple IP addresses to other networks.

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AIPtraffic from a single IP address to multiple IP addresses.

BIP traffic from a single IP address to a single IP address.

CIP traffic from multiple IP addresses to a single IP address.

DIP traffic from multiple IP addresses to other networks.

Question 4

When investigating a wireless attack, which of the following can be obtained from the DHCP server?

AMAC address of the attacker

BOperating system of the attacker

CIP traffic between the attacker and victim

DEffectiveness of the VLAN terminator

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AMAC address of the attacker

BOperating system of the attacker

CIP traffic between the attacker and victim

DEffectiveness of the VLAN terminator

Question 5

A DMZ web server has been compromised. During the log review, the incident responder wants to parse all common internal Class A addresses from the log. Which of the following commands should the responder use to accomplish this?

Agrep --x''(10.[0-9]+.[0-9]+.[0-9]+)'' etc/rc.d/apache2/access.log | output.txt

Bgrep --x''(192.168.[0.9]+[0-9])'' bin/apache2/access.log | output.txt

Cgrep --v''(10.[0-9]+.[0-9]+.[0-9]+)'' /var/log/apache2/access.log > output.txt

Dgrep --v''(192.168.[0.9]+[0-9]+)'' /var/log/apache2/access.log > output.txt

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

Agrep --x''(10.[0-9]+.[0-9]+.[0-9]+)'' etc/rc.d/apache2/access.log | output.txt

Bgrep --x''(192.168.[0.9]+[0-9])'' bin/apache2/access.log | output.txt

Cgrep --v''(10.[0-9]+.[0-9]+.[0-9]+)'' /var/log/apache2/access.log > output.txt

Dgrep --v''(192.168.[0.9]+[0-9]+)'' /var/log/apache2/access.log > output.txt

Curious about Actual Logical Operations CFR (CFR-210) Exam Questions?

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: