GIAC GCED Exam Questions Instant Access - No Installation Required

Question 1

Which Windows tool would use the following command to view a process:

process where name='suspect_malware.exe'list statistics

ATCPView

BTasklist

CWMIC

DNetstat

Answer : C

Question 2

Which of the following is an operational security control that is used as a prevention mechanism?

ALabeling of assets

BHeat detectors

CVibration alarms

DVoltage regulators

Answer : A

The following are considered operational security prevention controls: Security gates, guards, and dogs; Heating, ventilation, and air conditioning (HVAC); Fire suppressant; Labeling of assets (classification and responsible agents); Off-site storage (recovery); Safes and locks. The other distractors are considered operational security detection controls.

Question 3

What is the most common read-only SNMP community string usually called?

Aprivate

Bmib

Copen

Dpublic

Answer : D

Question 4

What would the output of the following command help an incident handler determine?

cscript manage-bde . wsf --status

AWhether scripts can be run from the command line

BWhich processes are running on the system

CWhen the most recent system reboot occurred

DWhether the drive has encryption enabled

Answer : D

Question 5

From a security perspective, how should the Root Bridge be determined in a Spanning Tree Protocol (STP) environment?

AManually selected and defined by the network architect or engineer.

BDefined by selecting the highest Bridge ID to be the root bridge.

CAutomatically selected by the Spanning Tree Protocol (STP).

DAll switch interfaces become root bridges in an STP environment.

Answer : B

Question 6

What would be the output of the following Google search?

filetype:doc inurl:ws_ftp

AWebsites running ws_ftp that allow anonymous logins

BDocuments available on the ws_ftp.com domain

CWebsites hosting the ws_ftp installation program

DDocuments found on sites with ws_ftp in the web address

Answer : D

Question 7

What is needed to be able to use taskkill to end a process on remote system?

ASvchost.exe running on the remote system

BDomain login credentials

CPort 445 open

DWindows 7 or higher on both systems

Answer : B

Domain login credentials are needed to kill a process on a remote system using taskkill.

GIAC Certified Enterprise Defender GCED Exam Questions