最新的GIAC GCED免費考試真題

問題1

A company classifies data using document footers, labeling each file with security labels "Public",
"Pattern", or "Company Proprietary". A new policy forbids sending "Company Proprietary" files via email. Which control could help security analysis identify breaches of this policy?

A. Enforcing TLS encryption for outbound email with attachments

B. Monitoring failed authentications on a central logging device

C. Running custom keyword scans on outbound SMTP traffic from the mail server

D. Blocking email attachments that match the hashes of the company's classification templates

正確答案: C

問題2

The matrix in the screen shot below would be created during which process?

A. Vulnerability Scanning

B. System Hardening

C. Data Classification

D. Risk Assessment

正確答案: D

問題3

A legacy server on the network was breached through an OS vulnerability with no patch available. The server is used only rarely by employees across several business units. The theft of information from the server goes unnoticed until the company is notified by a third party that sensitive information has been posted on the Internet. Which control was the first to fail?

A. Access control

B. Data classification

C. Security awareness

D. Incident response

正確答案: B

說明：（僅 Fast2test 成員可見）

問題4

Why might an administrator not be able to delete a file using the Windows del command without specifying additional command line switches?

A. Because it is encrypted

B. Because it has the read-only attribute set

C. Because it has the nodel attribute set

D. Because it is an executable file

正確答案: B

問題5

An outside vulnerability assessment reveals that users have been routinely accessing Gmail from work for over a year, a clear violation of this organization's security policy. The users report "it just started working one day". Later, a network administrator admits he meant to unblock Gmail for just his own IP address, but he made a mistake in the firewall rule.
Which security control failed?

A. Auditing

B. Access control

C. Rights management

D. Authentication

正確答案: A

說明：（僅 Fast2test 成員可見）

問題6

Which statement below is the MOST accurate about insider threat controls?

A. Security awareness programs have a minimal impact on reducing the insider threat.

B. Classification of information assets helps identify data to protect.

C. Separation of duties encourages one employee to control a great deal of information.

D. Rotation of duties makes an insider threat more likely.

E. Both detective and preventative controls prevent insider attacks.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題7

An incident response team investigated a database breach, and determined it was likely the result of an internal user who had a default password in place. The password was changed. A week later, they discover another loss of database records. The database admin provides logs that indicate the attack came from the front-end web interface. Where did the incident response team fail?

A. They did not properly identify the source of the breach

B. They did not lock the account after changing the password

C. They did not eradicate tools left behind by the attacker

D. They did not patch the database server after the event

正確答案: D

問題8

From a security perspective, how should the Root Bridge be determined in a Spanning Tree Protocol (STP) environment?

A. Automatically selected by the Spanning Tree Protocol (STP).

B. Defined by selecting the highest Bridge ID to be the root bridge.

C. Manually selected and defined by the network architect or engineer.

D. All switch interfaces become root bridges in an STP environment.

正確答案: B

問題9

What piece of information would be recorded by the first responder as part of the initial System Description?

A. Copies of log files

B. List of system directories

C. Hash of each hard drive

D. System serial number

正確答案: D

最新的GIAC Certified Enterprise Defender - GCED免費考試真題

聯系我們

站內鏈接

最新更新