GIAC Certified Enterprise Defender - GCED Exam Practice Test

Question 1

What information would the Wireshark filter in the screenshot list within the display window?

A. Only traffic with a destination address of 192.168.1.12 to or from port 80

B. Only traffic to or from IP address 192.168.1.12 and destined for port 80

C. Only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80

D. Only traffic with a source address of 192.168.1.12 to or from port 80

Correct Answer: B

Question 2

Which tool keeps a backup of all deleted items, so that they can be restored later if need be?

A. Yersinia

B. ProcessExplorer

C. Ettercap

D. Hijack This

E. ListDLLs

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

A company wants to allow only company-issued devices to attach to the wired and wireless networks.
Additionally, devices that are not up-to-date with OS patches need to be isolated from the rest of the network until they are updated. Which technology standards or protocols would meet these requirements?

A. LDAP and Authentication, Authorization and Accounting (AAA)

B. Kerberos and Network Access Control

C. 802.11i and Authentication, Authorization and Accounting (AAA)

D. 802.1x and Network Access Control

Correct Answer: D

Question 4

What is the most common read-only SNMP community string usually called?

A. private

B. public

C. mib

D. open

Correct Answer: B

Question 5

When attempting to collect data from a suspected system compromise, which of the following should generally be collected first?

A. The current routing table

B. The network connections and open ports

C. The contents of physical memory

D. A list of the running services

Correct Answer: C

Question 6

A legacy server on the network was breached through an OS vulnerability with no patch available. The server is used only rarely by employees across several business units. The theft of information from the server goes unnoticed until the company is notified by a third party that sensitive information has been posted on the Internet. Which control was the first to fail?

A. Security awareness

B. Data classification

C. Access control

D. Incident response

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

From a security perspective, how should the Root Bridge be determined in a Spanning Tree Protocol (STP) environment?

A. All switch interfaces become root bridges in an STP environment.

B. Manually selected and defined by the network architect or engineer.

C. Automatically selected by the Spanning Tree Protocol (STP).

D. Defined by selecting the highest Bridge ID to be the root bridge.

Correct Answer: D

Question 8

What are Browser Helper Objects (BHO)s used for?

A. To provide multi-factor authentication support for Firefox

B. To provide a more feature-rich interface for Internet Explorer

C. To allow Internet Explorer to process multi-part URLs

D. To allow Firefox to process JavaScript in a sandbox

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

If a Cisco router is configured with the "service config" configuration statement, which of the following tools could be used by an attacker to apply a new router configuration?

A. Yersinia

B. TFTPD

C. Ettercap

D. Hydra

Correct Answer: B

GIAC Certified Enterprise Defender - GCED Exam Practice Test

Latest Update

Useful Links

Contact Us