Free CFR-310 Exam Braindumps
CyberSec First Responder Questions 26–30 (page: 7)

Updated On: 9-Feb-2026

In which of the following attack phases would an attacker use Shodan?

  1. Scanning
  2. Reconnaissance
  3. Gaining access
  4. Persistence

Answer(s): A


Reference:

https://books.google.com.pk/books?id=3bzPDwAAQBAJ&pg=PA41&lpg=PA41&dq=attack+phases+would+an+attacker+use+Shodan&source=bl&ots=phUbfR8BOY&sig=ACfU3U1sg5J67s_sL_Ixpr3OiqdCIraKUw&hl=en&sa=X&ved=2ahUKEwjazaKCssXpAhUC4YUKHcJ5CVwQ6AEwAXoECBMQAQ#v=onepage&q=attack%20phases%20would%20an%20attacker%20use%20Shodan&f=false



During a malware-driven distributed denial of service attack, a security researcher found excessive requests to a name server referring to the same domain name and host name encoded in hexadecimal. The malware author used which type of command and control?

  1. Internet Relay Chat (IRC)
  2. Dnscat2
  3. Custom channel
  4. File Transfer Protocol (FTP)

Answer(s): D


Reference:

https://www.csoonline.com/article/3276660/what-is-shodan-the-search-engine-for-everything-on-the-internet.html



Nmap is a tool most commonly used to:

  1. Map a route for war-driving
  2. Determine who is logged onto a host
  3. Perform network and port scanning
  4. Scan web applications

Answer(s): C


Reference:

https://www.networkworld.com/article/3296740/what-is-nmap-why-you-need-this-network-mapper.html



A suspicious script was found on a sensitive research system. Subsequent analysis determined that proprietary data would have been deleted from both the local server and backup media immediately following a specific administrator’s removal from an employee list that is refreshed each evening. Which of the following BEST describes this scenario?

  1. Backdoor
  2. Rootkit
  3. Time bomb
  4. Logic bomb

Answer(s): A



A user receives an email about an unfamiliar bank transaction, which includes a link. When clicked, the link redirects the user to a web page that looks exactly like their bank’s website and asks them to log in with their username and password. Which type of attack is this?

  1. Whaling
  2. Smishing
  3. Vishing
  4. Phishing

Answer(s): D


Reference:

https://www.phishing.org/what-is-phishing



Viewing page 7 of 21
Viewing questions 31 - 35 out of 100 questions


Post your Comments and Discuss CertNexus CFR-310 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!