QUESTION: 45

Which of the following methods are used by attackers to find new ransomware victims? (Choose two.)

Web crawling
Distributed denial of service (DDoS) attack
Password guessing
Phishing
Brute force attack

Answer(s): D,E

Reference:

https://www.itproportal.com/features/the-four-most-popular-methods-hackers-use-to- spread- ransomware/

Reveal Solution Next Question

QUESTION: 46

After a hacker obtained a shell on a Linux box, the hacker then sends the exfiltrated data via Domain Name System (DNS). This is an example of which type of data exfiltration?

Covert channels
File sharing services
Steganography
Rogue service

Answer(s): A

Reveal Solution Next Question

QUESTION: 47

According to company policy, all accounts with administrator privileges should have suffix _j

While reviewing Windows workstation configurations, a security administrator discovers an account without the suffix in the administrator's group.
Which of the following actions should the security administrator take?
Review the system log on the affected workstation.
Review the security log on a domain controller.
Review the system log on a domain controller.
Review the security log on the affected workstation.

Answer(s): B

Reveal Solution Next Question

A security engineer is setting up security information and event management (SIEM).
Which of the following log sources should the engineer include that will contain indicators of a possible web server compromise? (Choose two.)

NetFlow logs
Web server logs
Domain controller logs
Proxy logs
FTP logs

Answer(s): B,C

Reference:

https://www.techrepublic.com/blog/data-center/top-three-indicators-of-compromised- web-servers/

Reveal Solution Next Question

Free CFR-410 Exam Braindumps (page: 13)

QUESTION: 45

Reference:

QUESTION: 46

QUESTION: 47

QUESTION: 48

Reference:

CFR-410 Discussions & Posts