CertNexus

CFR-310 Cybersec First Responder

Use original educational practice content, randomized simulator sessions, score history and explanation review for CFR-310.

Start Practice Test View Premium Plans

Practice questions are provided in English to match the language commonly used in IT certification exams.

QZ9 is an independent training platform. All practice questions are original and created for educational purposes only. We do not provide unauthorized vendor exam content. Microsoft, AWS, Cisco, CompTIA, PMI and other trademarks belong to their respective owners.

VendorCertNexus

CodeCFR-310

Duration120 Minutes

Questions100

Exam facts

Objective-based preparation without unauthorized content

Certification metadata is preserved from the legacy QZ9 catalog. Questions remain English-only.

Start Practice Test

1Find your exam

2Start the simulator

3Review results

QZ9Independent training platform

Free question preview

Exam simulator

Practice questions are provided in English to match the language commonly used in IT certification exams.

Question 1

A network security analyst has noticed a flood of Simple Mail Transfer Protocol (SMTP) traffic to internal clients. SMTP traffic should only be allowed to email servers. Which of the following commands would stop this attack? (Choose two.)

Question 2

A secretary receives an email from a friend with a picture of a kitten in it. The secretary forwards it to the ~COMPANYWIDE mailing list and, shortly thereafter, users across the company receive the following message: “You seem tense. Take a deep breath and relax!” The incident response team is activated and opens the picture in a virtual machine to test it. After a short analysis, the following code is found in C: \Temp\chill.exe:Powershell.exe –Command “do {(for /L %i in (2,1,254) do shutdown /r /m Error! Hyperlink reference not valid.> /f /t / 0 (/c “You seem tense. Take a deep breath and relax!”);Start-Sleep –s 900) } while(1)” Which of the following BEST represents what the attacker was trying to accomplish?

Question 3

A Linux system administrator found suspicious activity on host IP 192.168.10.121. This host is also establishing a connection to IP 88.143.12.123. Which of the following commands should the administrator use to capture only the traffic between the two hosts?

Question 4

After imaging a disk as part of an investigation, a forensics analyst wants to hash the image using a tool that supports piecewise hashing. Which of the following tools should the analyst use?

Question 5