Which statement best describes the defense-in-depth strategy?

Using multiple layers of security controls so that if one fails, others still provide protection

Placing all security devices in a single choke point to simplify management

Using only network-based controls to protect the perimeter

Relying on a single strong firewall as the primary defense

A company wants to strengthen its defense-in-depth posture against phishing attacks that deliver malware to user workstations. They already have email filtering and endpoint antivirus. Which additional control would most effectively add a layer of defense?

Train users to recognize phishing emails.

Deploy a web proxy that blocks access to known malicious websites and enforces safe browsing policies.

Disable email attachments from external senders.

Increase the frequency of antivirus signature updates.

Which activity is typically performed during the eradication phase of incident response?

Monitoring systems for signs of re-infection

Removing malware and closing the vulnerabilities that allowed the incident

How do threat intelligence feeds enhance defensive operations?

By encrypting all network traffic to prevent eavesdropping

By replacing the need for human security analysts

By providing up-to-date information about known threats and attack patterns

By automatically patching all vulnerabilities in the network

What is the primary purpose of a honeypot in a network defense strategy?

To provide a backup for critical production servers

To block malicious traffic before it reaches production systems

To attract and detect attackers by presenting a vulnerable-looking target

To replace the need for traditional security monitoring

GIAC Certified Enterprise Defender

Domain 1Objective 2

Defensive Infrastructure and Tactics GCED Practice Questions (Page 4)

Part of the Network Defense and Monitoring domain, which makes up ~34% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~24–41 in this domain), expect 6–10 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 16–20

16foundation · easy
Which statement best describes the defense-in-depth strategy?
Select an answer first
17application · medium
A company wants to strengthen its defense-in-depth posture against phishing attacks that deliver malware to user workstations. They already have email filtering and endpoint antivirus. Which additional control would most effectively add a layer of defense?
Select an answer first
18foundation · easy
Which activity is typically performed during the eradication phase of incident response?
Select an answer first
19foundation · easy
How do threat intelligence feeds enhance defensive operations?
Select an answer first
20foundation · easy
What is the primary purpose of a honeypot in a network defense strategy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCED

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCED” is a trademark of its owner, used for identification only.