CFR-210 Exam Dumps : Logical Operations CyberSec First Responder

grep –x”(10.[0-9]+.[0-9]+.[0-9]+)” etc/rc.d/apache2/access.log | output.txt

grep –x”(192.168.[0.9]+[0-9])” bin/apache2/access.log | output.txt

grep –v”(10.[0-9]+.[0-9]+.[0-9]+)” /var/log/apache2/access.log > output.txt

grep –v”(192.168.[0.9]+[0-9]+)” /var/log/apache2/access.log > output.txt

SNMP

DNS

ARP

DHCP

Notify the user that their workstation is being confiscated to perform an investigation, providing no details as to the reasoning.

Confiscate the workstation while the suspected employee is out of the office, andperform a search on the asset.

Confiscate the workstation while the suspected employee is out of the office, and perform the search on bit-for-bit image of the hard drive.

Notify the user that the workstation is being confiscated to perform an investigation, providing complete transparency as to the suspicions.