GIAC GCED Exam Questions Instant Access - No Installation Required

Question 1

How would an attacker use the following configuration settings?

AA client based HIDS evasion attack

BA firewall based DDoS attack

CA router based MITM attack

DA switch based VLAN hopping attack

Answer : C

Question 2

If a Cisco router is configured with the ''service config'' configuration statement, which of the following tools could be used by an attacker to apply a new router configuration?

ATFTPD

BHydra

CEttercap

DYersinia

Answer : A

Question 3

Which Unix administration tool is designed to monitor configuration changes to Cisco, Extreme and Foundry infrastructure devices?

ASNMP

BNetflow

CRANCID

DRMON

Answer : C

RANCID is a Unix tool which can be used to monitor changes to the following networked devices and more: IOS, CatOS, PIX, Juniper, Foundry, HP ProCurve, Extreme.

Question 4

How does the Cisco IOS IP Source Guard feature help prevent spoofing attacks?

AFilters traffic based on IP address once a DHCP address has been assigned

BPrevents unauthorized MAC addresses from receiving an IP address on the network

CBlocks unsolicited ARP packets after a client has received an IP address

DRate limits client traffic to prevent CAM table flooding

Answer : A

Question 5

From a security perspective, how should the Root Bridge be determined in a Spanning Tree Protocol (STP) environment?

AManually selected and defined by the network architect or engineer.

BDefined by selecting the highest Bridge ID to be the root bridge.

CAutomatically selected by the Spanning Tree Protocol (STP).

DAll switch interfaces become root bridges in an STP environment.

Answer : B

Question 6

An incident response team investigated a database breach, and determined it was likely the result of an internal user who had a default password in place. The password was changed. A week later, they discover another loss of database records. The database admin provides logs that indicate the attack came from the front-end web interface. Where did the incident response team fail?

AThey did not eradicate tools left behind by the attacker

BThey did not properly identify the source of the breach

CThey did not lock the account after changing the password

DThey did not patch the database server after the event

Answer : D

Question 7

Who is ultimately responsible for approving methods and controls that will reduce any potential risk to an organization?

ASenior Management

BData Owner

CData Custodian

DSecurity Auditor

Answer : D

GIAC Certified Enterprise Defender GCED Exam Questions