GIAC Defensible Security Architect - GDSA무료 덤프문제 풀어보기

A. Internet downtime

B. Subscription fraud

C. Overprovisioning

D. Data breaches

A. To allow twice as many users to connect

B. To double the VPN throughput

C. To provide backup connectivity options

D. To verify user identity with two different forms of authentication

A. Security policy enforcement

B. Application management

C. Device enrollment

D. Printer configuration

A. TLS

B. SHA-256

C. Blowfish

D. IPsec

A. Masking data to obscure sensitive information from unauthorized personnel.

B. Conducting user awareness training to mitigate human error and enhance security culture.

C. Encrypting data to prevent unauthorized access and ensure its confidentiality.

D. Updating software regularly to defend against the latest cybersecurity threats.

A. A model used to visualize adversary behaviors and tactics

B. A technique for mitigating malware infections on endpoint devices

C. A model focusing on incident response and recovery after an attack

D. A framework used to classify attacks based on their severity

A. A tool used to perform load balancing across multiple servers

B. A firewall used to protect internal network segments

C. A type of encryption software used to secure VPNs

D. A centralized server used to access and manage devices within a secure network

A. By generating excessive logs to deter attackers

B. By encrypting data at rest and in transit

C. By serving as the primary firewall at the network perimeter

D. By monitoring and analyzing system activities for signs of malicious actions

A. Disabling network segmentation

B. Increasing the number of VLANs

C. Implementing static ARP entries for critical devices

D. Enabling Dynamic ARP Inspection (DAI)

A. By automatically disabling remote access for employees

B. By increasing bandwidth for internal traffic

C. By reducing the number of external connections

D. By assuming that all users, even internal ones, may pose a threat and applying strict access controls

A. Ensure they are unmonitored

B. Apply strong authentication and encryption

C. Configure them with public access

D. Utilize the least secure versions

A. It encrypts sensitive data automatically

B. It reduces network congestion by filtering out redundant traffic

C. It isolates potentially malicious files and processes for analysis without impacting the live environment

D. It provides a backup solution for critical systems

A. All traffic, regardless of origin, must be authenticated and authorized

B. Traffic inside the perimeter is trusted by default

C. Traffic from trusted devices is exempt from inspection

D. External traffic is blocked automatically

A. Implement firewall rules to block unwanted IPv6 traffic and monitor both IPv4 and IPv6 interfaces for potential threats

B. Perform a full reset of all network devices to update configurations

C. Allow all traffic through both IPv4 and IPv6 to ensure compatibility

D. Disable IPv4 traffic entirely to focus solely on securing IPv6

A. Automatically encrypting all network traffic

B. Blocking malicious queries based on predefined rules

C. Real-time monitoring of database activities

D. Automatically generating backup copies of the database