GCED Exam Questions & Answers
GIAC Certified Enterprise Defender • GIAC
100% money-back guarantee
Sample GCED Questions
Practice with real exam-style questions, each with the verified correct answer and explanation.
Analyze the screenshot below. Which of the following attacks can be mitigated by these configuration settings?
Both BPDU Guard and Root Guard are used to prevent a new switch from becoming the Root Bridge. They are very similar but use different mechanisms.
Rootguard allows devices to use STP, but if they send superior BDPUs (i.e. they attempt to become the Root Bridge), Root Guard disables the port until the offending BPDUs cease. Recovery is automatic.
If Portfast is enabled on a port, BPDU Guard will disable the port if a BPDU is received. The port stays disabled until it is manually re-enabled. Devices behind such ports cannot use STP, as the port would be disabled as soon as they send BPDUs (which is the default behavior of switches).
What piece of information would be recorded by the first responder as part of the initial System Description?
Which of the following would be included in a router configuration standard?
Which of the following applies to newer versions of IOS that decrease their attack surface?
Recent versions of IOS have less services enabled by default, older versions vary but generally have more services (even those not needed) enabled by default; this increases the attack surface on the device.
Which of the following is an operational security control that is used as a prevention mechanism?
The following are considered operational security prevention controls: Security gates, guards, and dogs; Heating, ventilation, and air conditioning (HVAC); Fire suppressant; Labeling of assets (classification and responsible agents); Off-site storage (recovery); Safes and locks. The other distractors are considered operational security detection controls.
Get access to all 88 verified questions with detailed answers.
Unlock All GCED Questions