During an annual penetration test, several rootkit-enabled systems are found to be exfiltrating data.

Vendor: Logical Operations
Product: CFR-210
Update on: Jul 25, 2025
Questions: 100

Logical Operations CFR-210 Question Answer

During an annual penetration test, several rootkit-enabled systems are found to be exfiltrating data. The penetration test team and the internal incident response team work to begin cleanup. The company’s operations team offers a new emails server to use for communications during the incident. As cleanup continues, the attackers seem to know exactly what the incident response plan is. Which of the following will prevent the attackers from compromising cleanup activities?

Check the DNS server for rootkits placed by the attackers.

Disconnect the Internet router until all systems can be checked and cleaned.

Use out-of-band communication until the end of the incident.

Disconnect the old emails server until they can be checked and cleaned.