Online Access Free GCED Exam Questions

Which tasks would a First Responder perform during the Identification phase of Incident Response?

• A.Install or reenable host-based firewalls and anti-virus software on suspected systems.
• B.Disconnect network communications and search for malicious executables or processes.
• C.Verify the root cause of the incident and apply any missing security patches.
• D.Search for sources of data and information that may be valuable in confirming and containing an incident.

A compromised router is reconfigured by an attacker to redirect SMTP email traffic to the attacker's server before sending packets on to their intended destinations. Which IP header value would help expose anomalies in the path outbound SMTP/Port 25 traffic takes compared to outbound packets sent to other ports?

• A.Acknowledgement number
• B.Time to live
• C.Checksum
• D.Fragment offset

On which layer of the OSI Reference Model does the FWSnort utility function?

• A.Session Layer
• B.Data Link Layer
• C.Physical Layer
• D.Transport Layer
• E.Application Layer

What attack was indicated when the IDS system picked up the following text coming from the Internet to the web server?
select user, password from user where user= "jdoe" and password= 'myp@55!' union select "text",2 into outfile "/tmp/file1.txt" - - '

• A.Binary Code in HTTP Headers
• B.Remote File Inclusion
• C.SQL Injection
• D.URL Directory Traversal

An outside vulnerability assessment reveals that users have been routinely accessing Gmail from work for over a year, a clear violation of this organization's security policy. The users report "it just started working one day". Later, a network administrator admits he meant to unblock Gmail for just his own IP address, but he made a mistake in the firewall rule.
Which security control failed?

• A.Access control
• B.Rights management
• C.Auditing
• D.Authentication