A network analyst is investigating a potential data breach. The organization uses a proxy server that logs all outbound web traffic, and a firewall that logs all connections. The analyst needs to determine if sensitive data was exfiltrated to an external site. Which combination of data sources would provide the most complete evidence?

Proxy logs, firewall logs, and DNS logs.

DNS logs and email server logs.

Proxy logs and endpoint antivirus logs.

GIAC Certified Enterprise Defender

Domain 1Objective 2

Defensive Infrastructure and Tactics GCED Practice Questions (Page 9)

Part of the Network Defense and Monitoring domain, which makes up ~34% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~24–41 in this domain), expect 6–10 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

7concepts

Questions 41–41

41expert · hard
A network analyst is investigating a potential data breach. The organization uses a proxy server that logs all outbound web traffic, and a firewall that logs all connections. The analyst needs to determine if sensitive data was exfiltrated to an external site. Which combination of data sources would provide the most complete evidence?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCED

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCED” is a trademark of its owner, used for identification only.

Defensive Infrastructure and Tactics GCED Practice Questions (Page 9)

Questions 41–41

Keep studying — Network Defense and Monitoring