CertNexus Exam CFR-410 Topic 4 Question 37 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 37
Topic #: 4

[All CFR-410 Questions]

Tcpdump is a tool that can be used to detect which of the following indicators of compromise?

AUnusual network traffic

BUnknown open ports

CPoor network performance

DUnknown use of protocols

Show Suggested Answer

Suggested Answer: A, B

by Ona at Jun 21, 2024, 11:17 AM

Limited Time Offer

25%

Off

Get Premium CFR-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leota

1 months ago

I'm just glad they didn't ask about using tcpdump to detect 'unusual duck-billed platypus activity' - that would have really thrown me for a loop!

upvoted 0 times

...

Broderick

1 months ago

Ah, the old tcpdump question. It's like asking a carpenter which tool is best for measuring wood - the answer is obvious! A) Unusual network traffic is the way to go.

upvoted 0 times

Reta

3 days ago

Unknown open ports could also be a sign of something suspicious going on.

upvoted 0 times

...

Jennifer

16 days ago

I agree, unusual network traffic is a clear indicator of compromise.

upvoted 0 times

...

Janine

1 months ago

Hmm, I was considering C) Poor network performance, but that's more of a sympAilene than a direct indicator of compromise. A) Unusual network traffic makes the most sense.

upvoted 0 times

Audry

2 days ago

Yeah, B) Unknown open ports could indicate unauthorized access as well.

upvoted 0 times

...

Dortha

3 days ago

I agree, A) Unusual network traffic is a clear indicator of compromise.

upvoted 0 times

...

Merri

3 days ago

I think D) Unknown use of protocols could also be a red flag.

upvoted 0 times

...

Raymon

16 days ago

I agree, A) Unusual network traffic is a clear sign of compromise.

upvoted 0 times

...

Ailene

2 months ago

I was thinking B) Unknown open ports, but now that I think about it, tcpdump is more about capturing and inspecting the actual traffic, not necessarily open ports.

upvoted 0 times