CertNexus CFR-410 Exam - Topic 8 Question 24 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 24
Topic #: 8

According to company policy, all accounts with administrator privileges should have suffix _j

a. While reviewing Windows workstation configurations, a security administrator discovers an account without the suffix in the administrator's group. Which of the following actions should the security administrator take?

AReview the system log on the affected workstation.

BReview the security log on a domain controller.

CReview the system log on a domain controller.

DReview the security log on the affected workstation.

Show Suggested Answer

Suggested Answer: A, B

by Golda at Nov 21, 2023, 10:05 PM

Limited Time Offer

25%

Off

Get Premium CFR-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Timothy

3 months ago

I thought all admin accounts had to follow that naming convention!

upvoted 0 times

...

Lashaun

4 months ago

Wait, why would there be an account without the suffix? That seems off.

upvoted 0 times

...

Carey

4 months ago

I agree with Teresita, the domain controller log is key here.

upvoted 0 times

...

Anika

4 months ago

I think reviewing the system log on the affected workstation makes more sense.

upvoted 0 times

...

Teresita

4 months ago

Definitely should check the security log on the domain controller.

upvoted 0 times

...

Brittni

4 months ago

I’m a bit confused; should we focus on the workstation or the domain controller? I feel like both logs could be relevant.

upvoted 0 times

...

Willow

5 months ago

I practiced a similar question, and I think the security log on the affected workstation could show unauthorized access attempts.

upvoted 0 times

...

Merilyn

5 months ago

I'm not entirely sure, but I feel like checking the system log on the affected workstation could help identify how the account was created.

upvoted 0 times

...

Yuki

5 months ago

I think I remember that reviewing the security log on the domain controller might give more insight into account activities.

upvoted 0 times

...

Salley

5 months ago

I'm confident that the right answer is to review the security log on the affected workstation. The question is focused on that specific machine, so that's where I'd start my investigation.

upvoted 0 times

...

Erin

5 months ago

Hmm, I'm a bit unsure here. Should I be looking at the domain controller logs instead? The question mentions company policy, so the issue might be at the domain level.

upvoted 0 times

...

Ora

5 months ago

This seems straightforward. I'd review the security log on the affected workstation to see if there are any suspicious activities or unauthorized access attempts.

upvoted 0 times

...

Carmen

5 months ago

Okay, let me think this through. The policy is about administrator accounts, so I should probably check the security log on the domain controller to see if there are any issues with that specific account.

upvoted 0 times

...

Tamie

5 months ago

This question looks tricky, but I think I can break it down step-by-step to figure out the right answers.

upvoted 0 times

...

Laine

5 months ago

Hmm, this looks like a tricky one. I'll need to think through the subnet range and how the Shazzam batch size factors in.

upvoted 0 times

...

Rodolfo

5 months ago

This looks like a straightforward question about resetting a Session Border Controller to its factory default state. I'll carefully read through the options and select the one that best matches the description.

upvoted 0 times

...

Reena

10 months ago

This question is a real 'suffix-cation' of my security knowledge! I better choose wisely or I'll be in the 'admin-istrative' doghouse.

upvoted 0 times

...

Floyd

10 months ago

I'm going to review the security log on the domain controller. That's where I'll find the most relevant information about this policy violation.

upvoted 0 times

Cristy

8 months ago

I'll also check the system log on the domain controller just to be thorough.

upvoted 0 times

...

Jeannine

8 months ago

Make sure to document everything you find for the report.

upvoted 0 times

...

Lindsey

8 months ago

That's where I'll find the most relevant information about this policy violation.

upvoted 0 times

...

Raymon

9 months ago

I'm going to review the security log on the domain controller.

upvoted 0 times

...

Janella

10 months ago

Wait, why would I review the system log on a domain controller? Shouldn't I be looking at the security log on the affected workstation to find out what's going on?

upvoted 0 times

Rickie

9 months ago

C: Review the system log on a domain controller.

upvoted 0 times

...

Jaclyn

9 months ago

B: Review the security log on a domain controller.

upvoted 0 times

...

Irma

9 months ago

A: Review the system log on the affected workstation.

upvoted 0 times

...

Hester

10 months ago

Hmm, the security log on the affected workstation might give me some clues about how this account ended up without the required suffix. I'll go with option D.

upvoted 0 times