QUESTION: 37

During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

Reconnaissance
Scanning
Gaining access
Persistence

Answer(s): B

Reference:

https://blog.stealthbits.com/finding-microsoft-sql-server-targets-sql-attacks/

Reveal Solution Next Question

QUESTION: 38

An attacker intercepts a hash and compares it to pre-computed hashes to crack a password.
Which of the following methods has been used?

Password sniffing
Brute force attack
Rainbow tables
Dictionary attack

Answer(s): C

Reveal Solution Next Question

As part of an organization's regular maintenance activities, a security engineer visits the Internet Storm Center advisory page to obtain the latest list of blacklisted host/network addresses. The security engineer does this to perform which of the following activities?

Update the latest proxy access list
Monitor the organization's network for suspicious traffic
Monitor the organization's sensitive databases
Update access control list (ACL) rules for network devices

Answer(s): D

Reveal Solution Next Question

QUESTION: 40

Which of the following, when exposed together, constitutes PII? (Choose two.)

Full name
Birth date
Account balance
Marital status
Employment status

Answer(s): A,C

Reference:

https://www.lifelock.com/learn-identity-theft-resources-what-is-personally-identifiable- information.html

Reveal Solution Next Question

Free CFR-410 Exam Braindumps (page: 11)

QUESTION: 37

Reference:

QUESTION: 38

QUESTION: 39

QUESTION: 40

Reference:

CFR-410 Discussions & Posts