GIAC Certified Detection Analyst
Domain 3Objective 1
Asset and Network Analytics GCDA Practice Questions (Page 7)
Part of the Network and Asset Analytics domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 6–10 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)
52questions here
11free pages
12concepts
Questions 31–35
- 31
An analyst is mapping the network topology of a new environment. The analyst has access to switch configuration files, NetFlow data, and ARP tables. The goal is to understand communication paths between assets. Which combination of data sources provides the most complete topology map?
Select an answer first - 32
A financial services company is classifying assets for monitoring priority. The assets include a public web server, an internal HR system, a development test server, and a domain controller. Which asset should be classified as the most critical?
Select an answer first - 33
Which technology is commonly used to enforce network segmentation?
Select an answer first - 34
Which of the following is an example of log correlation revealing a security threat?
Select an answer first - 35
Which protocol is commonly used for remote administration and is often targeted by attackers for brute-force attacks?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCDA” is a trademark of its owner, used for identification only.