GIAC Defensible Security Architect - GDSA Exam Practice Test

Question 1

Which delivery model is typically responsible for abstracting hardware and operating systems from users?
Response:

A. SaaS

B. PaaS

C. IaaS

D. DaaS

Correct Answer: B

Question 2

Encryption in network security serves to:
Response:

A. Increase the network's latency.

B. Prevent unauthorized data manipulation and eavesdropping.

C. Replace the need for a firewall.

D. Slow down the network.

Correct Answer: B

Question 3

What is the purpose of IPv6 router advertisements?
Response:

A. To block malicious traffic from entering the network

B. To encrypt data in transit

C. To allocate MAC addresses to devices

D. To inform devices about network prefixes and other configuration settings

Correct Answer: D

Question 4

Which of the following are key components of data-centric security?
(Choose two)
Response:

A. User awareness training

B. Regular software updates

C. Data encryption

D. Data masking

Correct Answer: C,D

Question 5

DHCP starvation attack is aimed at:
Response:

A. Enhancing the DHCP server's efficiency by preallocating IP addresses

B. Exhausting all available IP addresses in the DHCP pool to deny legitimate devices

C. Contaminating the DHCP pool with incorrect MAC to IP address mappings

D. Increasing the DHCP lease time to its maximum

Correct Answer: B

Question 6

Which of the following elements are fundamental to data-centric security?
(Choose two)
Response:

A. Encrypting data to prevent unauthorized access and ensure its confidentiality.

B. Conducting user awareness training to mitigate human error and enhance security culture.

C. Masking data to obscure sensitive information from unauthorized personnel.

D. Updating software regularly to defend against the latest cybersecurity threats.

Correct Answer: A,C

Question 7

What practices are vital for effective Layer 3 defense?
(Choose two)
Response:

A. Designing a segmented network architecture to limit the spread of security breaches within the network.

B. Employing stateful packet inspection to analyze and filter packets based on established connections.

C. Applying rigorous network monitoring to detect and respond to unusual traffic patterns swiftly.

D. Implementing access control lists (ACLs) to restrict unauthorized network traffic and enhance security.

Correct Answer: A,D

Question 8

Which of the following best defines the Zero Trust Model in security architecture?
Response:

A. Allowing all traffic from trusted devices without further checks

B. Prioritizing external threats over internal ones

C. Granting users full access to network resources once authenticated

D. Assuming every request is a potential security threat, even from within the network

Correct Answer: D

Question 9

Which principles are fundamental to data governance?
(Select all that apply)
Response:

A. Data Deletion after a set period

B. Data Quality

C. Data Consistency

D. Data Availability

Correct Answer: B,C,D

Question 10

Your security operations team has detected unusual activity on your organization's network, suggesting a DDoS attack is underway. Multiple external IP addresses are sending excessive amounts of traffic to your web server.
What immediate steps should you take to mitigate the attack and protect your infrastructure?
Response:

A. Migrate all services to a backup data center and restore data from backups

B. Disconnect the web server from the internet to stop all incoming traffic

C. Block all outbound network traffic and initiate a full system scan

D. Enable rate-limiting and deploy a Web Application Firewall (WAF) to filter traffic from malicious IPs

Correct Answer: D

Question 11

Which encryption protocol is commonly used to secure VPN connections over the internet?
Response:

A. TLS

B. SMTP

C. SNMP

D. IPsec

Correct Answer: D

Question 12

Which techniques can help in performing threat vector analysis in security architecture?
(Choose two)
Response:

A. Conducting regular vulnerability scans

B. Encrypting all outbound network traffic

C. Mapping out potential attack vectors for specific assets

D. Implementing network segmentation for all users

Correct Answer: A,C

Question 13

Your company is facing increased phishing attempts through email attachments. The security team has decided to implement an SMTP proxy to improve email security. What are the key benefits of deploying an SMTP proxy, and how should it be configured to block malicious content?
Response:

A. The SMTP proxy will filter email attachments and block suspicious content; it should be configured to scan attachments for malware and enforce policies on acceptable attachment types

B. The SMTP proxy will prevent users from accessing external websites while they are receiving emails

C. The SMTP proxy will encrypt all incoming emails and block any that are not encrypted

D. The SMTP proxy will focus on blocking all outbound email traffic to prevent data loss

Correct Answer: A

Question 14

Which of the following is a core benefit of using Network Intrusion Prevention Systems (NIPS)?
Response:

A. They are primarily used for data recovery.

B. They can take direct action to block or prevent malicious activity.

C. They primarily focus on outbound traffic.

D. They can replace the need for traditional firewalls.

Correct Answer: B

GIAC Defensible Security Architect - GDSA Exam Practice Test

Latest Update

Useful Links

Contact Us