최신GIAC Certified Enterprise Defender - GCED무료샘플문제

A. Port 445 open

B. Svchost.exe running on the remote system

C. Windows 7 or higher on both systems

D. Domain login credentials

A. Prevention

B. Identification

C. Mitigation

D. Monitoring

A. Data Owner

B. Data Custodian

C. Senior Management

D. Security Auditor

A. Only traffic to or from IP address 192.168.1.12 and destined for port 80

B. Only traffic with a destination address of 192.168.1.12 to or from port 80

C. Only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80

D. Only traffic with a source address of 192.168.1.12 to or from port 80

A. Signature-based

B. Monitored

C. Anomaly-based

D. Statistical

A. Segmentation of the network to protect critical assets

B. Resetting registry keys that vary from the baseline configuration

C. Determining whether encryption is in use on in scope systems

D. Removal of unnecessary accounts from compromised systems

A. Using vendors other than Cisco for switching equipment as they don't offer port security

B. Spoofed MAC addresses from being used to cause a Denial of Service condition

C. Network Access Control systems from functioning properly

D. Legitimate MAC addresses from being used to cause a Denial of Service condition

A. Fingerprinting

B. Baselining

C. Digital watermarking

D. Wiping

A. The pass action serves as a placeholder in the snort configuration file for future rule updates.

B. Using the pass action allows a packet to be passed to an external process.

C. The pass action increases the number of false positives, better testing the rules.

D. The pass action simplifies some filtering by specifying what to ignore.

E. The pass action passes the packet onto further rules for immediate analysis.