CertNexus Related Exams
CFR-410 Exam
An administrator believes that a system on VLAN 12 is Address Resolution Protocol (ARP) poisoning clients on the network. The administrator attaches a system to VLAN 12 and uses Wireshark to capture traffic. After
reviewing the capture file, the administrator finds no evidence of ARP poisoning. Which of the following actions should the administrator take next?
A security analyst is required to collect detailed network traffic on a virtual machine. Which of the following tools could the analyst use?
If an organization suspects criminal activity during the response to an incident, when should they notify law enforcement authorities?