[2026] GIAC Certified Enterprise Defender - GCED 무료 시험 문제

문제1

What are Browser Helper Objects (BHO)s used for?

A. To provide a more feature-rich interface for Internet Explorer

B. To allow Internet Explorer to process multi-part URLs

C. To allow Firefox to process JavaScript in a sandbox

D. To provide multi-factor authentication support for Firefox

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제2

Which command is the Best choice for creating a forensic backup of a Linux system?

A. Run form a bootable CD: tar cvzf image.tgz /

B. Run from compromised operating system: tar cvzf image.tgz /

C. Run from a bootable CD: dd if=/dev/hda1 of=/mnt/backup/hda1.img

D. Run from compromised operating system: dd if=/ dev/hda1 of=/mnt/backup/hda1.img

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제3

You are responding to an incident involving a Windows server on your company's network. During the investigation you notice that the system downloaded and installed two files, iexplorer.exe and iexplorer.sys. Based on the behavior of the system you suspect that these files are part of a rootkit. If this is the case what is the likely purpose of the .sys file?

A. It is a logfile used to collect usernames and passwords

B. It is a device driver used to load the rootkit

C. It is an executable used to configure a keylogger

D. It is a configuration file used to open a backdoor

정답: B

문제4

Analyze the screenshot below. Which of the following attacks can be mitigated by these configuration settings?

A. A Replay attack

B. A MAC Flood attack

C. A Denial-of-Service attack using network broadcasts

D. An IP masquerading attack

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제5

How does data classification help protect against data loss?

A. Digital watermarks can be applied to sensitive data

B. Resources and controls can be appropriately allocated

C. DLP systems require classification in order to protect data

D. Data at rest is easier to protect than data in transit

정답: C

문제6

An incident response team is handling a worm infection among their user workstations. They created an IPS signature to detect and block worm activity on the border IPS, then removed the worm's artifacts or workstations triggering the rule. Despite this action, worm activity continued for days after. Where did the incident response team fail?

A. The team did not understand the worm's propagation method

B. The team did not adequately apply lessons learned from the incident

C. They did not receive timely notification of the security event

D. The custom rule did not detect all infected workstations

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제7

On which layer of the OSI Reference Model does the FWSnort utility function?

A. Transport Layer

B. Data Link Layer

C. Application Layer

D. Session Layer

E. Physical Layer

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제8

Which statement below is the MOST accurate about insider threat controls?

A. Classification of information assets helps identify data to protect.

B. Security awareness programs have a minimal impact on reducing the insider threat.

C. Rotation of duties makes an insider threat more likely.

D. Separation of duties encourages one employee to control a great deal of information.

E. Both detective and preventative controls prevent insider attacks.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제9

Which type of attack could be used to obtain IOS router configuration files without a valid user password?

A. SNMP man in the middle

B. CDP sniffing

C. ARP cache poisoning

D. TFTP brute force

정답: D

설명: (Fast2test 회원만 볼 수 있음)

GIAC Certified Enterprise Defender - GCED무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트