GIAC Certified Enterprise Defender
Domain 1Objective 1
Defending Network Protocols GCED Practice Questions (Page 6)
Part of the Network Defense and Monitoring domain, which makes up ~34% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~24–41 in this domain), expect 6–10 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)
43questions here
9free pages
5concepts
Questions 26–30
- 26
In the OSI model, which layer is responsible for routing packets across different networks?
Select an answer first - 27
A company is deploying a new web application and wants to protect it from protocol-based attacks while maintaining compatibility with older clients that do not support TLS 1.2. Which configuration would provide the best security without breaking these clients?
Select an answer first - 28
A network defender is analyzing a packet capture from a compromised host. The capture shows a large number of TCP SYN packets sent to a single external IP, each with a different source port, and the host receives no SYN-ACK responses. The defender also notices that the source MAC address in these packets is not the host's actual MAC address. Which two protocol behaviors are being abused in this scenario?
Select an answer first - 29
Which configuration change is most effective in mitigating ARP spoofing attacks on a switched network?
Select an answer first - 30
A security analyst needs to identify which protocol provides reliable, connection-oriented data delivery with error checking and retransmission. Which protocol should they select?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCED” is a trademark of its owner, used for identification only.