Question 1

Which of the following is considered a preventative control in operational security?

ASmoke Sensors

BFire Suppressant

CVoltage Regulators

DVibration Alarms

Answer : B

A fire suppressant device is a preventive control. Smoke sensors, vibration alarms, and voltage regulators are part of detection controls.

Question 2

Which of the following applies to newer versions of IOS that decrease their attack surface?

ATelnet cannot be enabled or used

BThe Cisco Discovery Protocol has been removed

CMore services are disabled by default

DTwo-factor authentication is default required

Answer : C

Recent versions of IOS have less services enabled by default, older versions vary but generally have more services (even those not needed) enabled by default; this increases the attack surface on the device.

Question 3

The security team wants to detect connections that can compromise credentials by sending them in plaintext across the wire. Which of the following rules should they enable on their IDS sensor?

Aalert tcp any 22 <> any 22 (msg:SSH connection; class type:misc-attack;sid: 122:rev:1;)

Balert tcp any any <> any 6000: (msg:X-Windows session; flow:from_server,established;nocase;classtype:misc-attack;sid:101;rev:1;)

Calert tcp any 23 <> any 23 (msg:Telnet shell; class type:misc-attack;sid:100; rev:1;)

Dalert udp any any <> any 5060 (msg:VOIP message; classtype:misc-attack;sid:113; rev:2;)

Answer : C

Question 4

Which of the following is an outcome of the initial triage during incident response?

ARemoval of unnecessary accounts from compromised systems

BSegmentation of the network to protect critical assets

CResetting registry keys that vary from the baseline configuration

DDetermining whether encryption is in use on in scope systems

Answer : B

Question 5

The creation of a filesystem timeline is associated with which objective?

AForensic analysis

BFirst response

CAccess control

DIncident eradication

Answer : A

Free Practice Questions for GIAC GCED Exam

Question 1

Question 2

Question 3

Question 4

Question 5