Which statement correctly describes the role of network protocols in modern communication?

They physically connect devices using copper or fiber-optic cabling.

They define the rules and conventions for exchanging data between devices.

They encrypt all data transmitted across a network to ensure confidentiality.

They assign unique IP addresses to devices on a network.

A security team wants to prevent an attacker from sniffing traffic on a switched network. Which configuration should be implemented on the switches?

Configure all ports as trunk ports

Enable port security to limit MAC addresses per port

A network administrator is analyzing a packet capture and sees a host sending ICMP echo requests to a broadcast address. The administrator is concerned about a potential Smurf attack. What should the administrator do to prevent the network from being used in such an attack?

Disable IP-directed broadcast forwarding on routers

Increase the ICMP rate limit on the firewall

Enable ICMP redirects on the routers

Block all ICMP traffic at the perimeter firewall

A security administrator is hardening DNS infrastructure. Which configuration would most effectively prevent DNS cache poisoning?

Use a different DNS server software

Enable DNSSEC on the authoritative and recursive resolvers

Disable recursion on the authoritative server

GIAC Certified Enterprise Defender

Domain 1Objective 1

Defending Network Protocols GCED Practice Questions (Page 4)

Part of the Network Defense and Monitoring domain, which makes up ~34% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~24–41 in this domain), expect 6–10 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

5concepts

Questions 16–20

16foundation · easy
Which statement correctly describes the role of network protocols in modern communication?
Select an answer first
17application · medium
A security team wants to prevent an attacker from sniffing traffic on a switched network. Which configuration should be implemented on the switches?
Select an answer first
18application · medium
A network administrator is analyzing a packet capture and sees a host sending ICMP echo requests to a broadcast address. The administrator is concerned about a potential Smurf attack. What should the administrator do to prevent the network from being used in such an attack?
Select an answer first
19application · medium
An analyst is examining a packet capture and sees a high volume of UDP packets sent to port 53 of an external server, with the source IP spoofed to a victim's address. The external server is responding with large DNS responses. Which type of attack is this?
Select an answer first
20application · medium
A security administrator is hardening DNS infrastructure. Which configuration would most effectively prevent DNS cache poisoning?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCED

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCED” is a trademark of its owner, used for identification only.