GIAC Certified Enterprise Defender (GCED) Free Practice Exam Questions

10 real GIAC Certified Enterprise Defender (GCED) exam questions with answers and AI explanations. GIAC certification prep — page 1 of 1.

1. Question 1: At the start of an investigation on a Windows system, the lead handler executes the following commands after inserting a USB drive. What is the purpose of this…
2. Question 2: An analyst will capture traffic from an air-gapped network that does not use DNS. The analyst is looking for unencrypted Syslog data being transmitted. Which o…
3. Question 3: Which of the following is best defined as "anything that has the potential to target known or existing vulnerabilities in a system?"
4. Question 4: An incident response team is handling a worm infection among their user workstations. They created an IPS signature to detect and block worm activity on the bo…
5. Question 5: On which layer of the OSI Reference Model does the FWSnort utility function?
6. Question 6: Which Unix administration tool is designed to monitor configuration changes to Cisco, Extreme and Foundry infrastructure devices?
7. Question 7: If a Cisco router is configured with the "service config" configuration statement, which of the following tools could be used by an attacker to apply a new rou…
8. Question 8: Michael, a software engineer, added a module to a banking customers code. The new module deposits small amounts of money into his personal bank account. Michae…
9. Question 9: Which type of media should the IR team be handling as they seek to understand the root cause of an incident?
10. Question 11: You have been tasked with searching for Alternate Data Streams on the following collection of Windows partitions; 2GB FAT16, 6GB FAT32, and 4GB NTFS. How many…