最新的GIAC GDAT免費考試真題

問題1

In what scenario might an attacker use social engineering as part of their exfiltration strategy?
Response:

A. To understand the organization's data classification policy

B. To gain initial access through phishing

C. To physically access restricted areas

D. To learn schedules that reduce detection risk

正確答案: B

問題2

What role does the Windows Task Scheduler play in malware persistence?
Response:

A. It can be used by malware to execute payloads at specified times

B. It is used to encrypt data files periodically

C. It helps the system manage user permissions

D. It increases the efficiency of network traffic monitoring

正確答案: A

問題3

Which of the following is a primary goal of the reconnaissance phase of a cyber attack?
Response:

A. To gather as much information as possible about the target's infrastructure

B. To establish persistence on the target system

C. To encrypt the target's data

D. To deny the target access to its network resources

正確答案: A

問題4

Which technique is frequently used to execute malicious payloads after an initial infection?
Response:

A. Disk defragmentation

B. PowerShell scripts

C. Automatic system updates

D. Network traffic encryption

正確答案: B

問題5

What is a common method by which malware ensures its persistence on a host system after reboot?
Response:

A. Deleting system logs

B. Registering a new user account

C. Adding entries to the Windows Registry

D. Modifying user profiles

正確答案: C

問題6

Which of the following is a common persistence mechanism used by malware to ensure it runs after system reboots?
Response:

A. Creating a new user account

B. Deleting system logs

C. Disabling security services

D. Modifying Windows Registry keys

正確答案: D

問題7

What role does configuration management play in preventing application exploitation?
Response:

A. It provides a backup of the original codebase

B. It allows developers to work simultaneously on different features

C. It ensures that all changes to the software are documented and reversible

D. It increases the speed of the development process

正確答案: C

問題8

Why is it important to regularly review and adjust user privileges within an information system?
Response:

A. To ensure that the system remains efficient and user-friendly

B. To adapt to changes in organizational structure and user responsibilities

C. To comply with international data protection laws

D. To mitigate risks associated with obsolete or unnecessary permissions

正確答案: B,D

問題9

Which security practices help detect and mitigate persistence threats in an organization?
(Choose Three)
Response:

A. Enforcing strict password policies

B. Implementing application whitelisting

C. Continuous monitoring of system and network logs

D. Using standard antivirus solutions

正確答案: B,C,D

問題10

Why is regular vulnerability scanning crucial for application security?
Response:

A. It identifies weaknesses that could be exploited by attackers

B. It ensures compliance with international standards

C. It aligns IT strategies with business objectives

D. It facilitates faster software release cycles

正確答案: A

問題11

Which of the following describes how application control policies contribute to payload execution prevention?
Response:

A. They detect changes in network configurations.

B. They enforce two-factor authentication.

C. They monitor and filter browsing behavior in real-time.

D. They prevent the execution of unauthorized applications.

正確答案: D

最新的GIAC Defending Advanced Threats - GDAT免費考試真題

聯系我們

站內鏈接

最新更新