CertNexus CFR-410 Exam - Topic 4 Question 52 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 52
Topic #: 4

During a security investigation, a suspicious Linux laptop is found in the server room. The laptop is processing information and indicating network activity. The investigator is preparing to launch an investigation to

determine what is happening with this laptop. Which of the following is the MOST appropriate set of Linux commands that should be executed to conduct the investigation?

Aiperf, traceroute, whois, ls, chown, cat

Biperf, wget, traceroute, dc3dd, ls, whois

Clsof, chmod, nano, whois, chown, ls

Dlsof, ifconfig, who, ps, ls, tcpdump

Show Suggested Answer

Suggested Answer: A, B

by Kendra at Jan 11, 2025, 07:26 AM

Limited Time Offer

25%

Off

Get Premium CFR-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Chau

3 months ago

Surprised that no one mentioned checking logs first!

upvoted 0 times

...

Almeta

3 months ago

I’d go with B for the wget, but D seems solid too.

upvoted 0 times

...

Albina

4 months ago

Wait, why would you need ifconfig? Isn't that outdated?

upvoted 0 times

...

Simona

4 months ago

Definitely agree, lsof and tcpdump are essential!

upvoted 0 times

...

Mary

4 months ago

I think option D is the best choice for this situation.

upvoted 0 times

...

Chaya

4 months ago

I’m a bit confused about the right commands, but I remember that ls and whois are common. I just can’t recall if they’re enough for a full investigation.

upvoted 0 times

...

Mickie

5 months ago

I think I saw a question similar to this where we needed to check active processes and network connections, which makes me think lsof and ifconfig are crucial.

upvoted 0 times

...

Silva

5 months ago

I'm not entirely sure, but I feel like whois and ps are important for checking user activity, which makes me lean towards option D as well.

upvoted 0 times

...

Elvera

5 months ago

I remember practicing with lsof and tcpdump for network investigations, so I think option D might be the best choice.

upvoted 0 times

...

Christa

5 months ago

I'm a bit confused by this question. There are a lot of different commands listed, and I'm not sure which ones would be the most appropriate for a security investigation. I'll need to do some research on the purpose and functionality of each command to determine the best approach.

upvoted 0 times

...

Lucina

5 months ago

Okay, I've got this. The key here is to focus on commands that will allow me to gather information about the network activity and processes running on the laptop. I think option D looks the most promising - commands like lsof, ifconfig, and tcpdump would be really useful for this type of investigation.

upvoted 0 times

...

Ivory

5 months ago

Hmm, this is a tricky one. There are a lot of different commands listed, and I'm not sure which ones would be the most appropriate for a security investigation. I'll need to think carefully about the purpose of each command and how they could be used to gather relevant information.

upvoted 0 times

...

Kaitlyn

5 months ago

This question seems straightforward - we need to identify the most appropriate set of Linux commands to conduct a security investigation on a suspicious laptop. I'll carefully review each option and think about the specific commands that would be most useful in this scenario.

upvoted 0 times

...

Stevie

10 months ago

Wait, is this a Linux version of 'Where's Waldo'? I'm just here to find the laptop and give it a stern talking-to for being in the wrong place.

upvoted 0 times

Vi

9 months ago

C) lsof, chmod, nano, whois, chown, ls

upvoted 0 times

...

Laurene

9 months ago

B) iperf, wget, traceroute, dc3dd, ls, whois

upvoted 0 times

...

Lanie

9 months ago

A) iperf, traceroute, whois, ls, chown, cat

upvoted 0 times

...

Bette

10 months ago

Hold on, did someone say server room? That's where the real action is! I'm ready to crack this case wide open with the right set of commands.

upvoted 0 times

...

Harrison

10 months ago

Hmm, this is tricky. I bet the answer is hidden in plain sight, like a needle in a haystack of Linux commands.

upvoted 0 times

Angella

9 months ago

I would go with option D, it includes commands for checking network connections and processes.

upvoted 0 times

...

Rutha

9 months ago

D) lsof, ifconfig, who, ps, ls, tcpdump

upvoted 0 times

...

Gearldine

10 months ago

I think option A looks good, it covers network activity and file management commands.

upvoted 0 times

...

Fidelia

10 months ago

A) iperf, traceroute, whois, ls, chown, cat

upvoted 0 times

...

Leonie

10 months ago

Oooh, looks like we've got a mystery on our hands! Time to put on my detective hat and see what these Linux commands can uncover.

upvoted 0 times

Tijuana

9 months ago

After that, we can check the processes with ps and see if anything suspicious is running.

upvoted 0 times

...

Luther

9 months ago

Agreed, we can also use tcpdump to capture network traffic and see where it's going.

upvoted 0 times

...

Casandra

9 months ago

I think we should start by running lsof to see what files are being accessed.

upvoted 0 times

...

Pauline

11 months ago

The options seem promising, but I'm not sure what the best commands would be for this specific investigation. Guess I'll have to dig deeper into each set to figure it out.

upvoted 0 times