GIAC Certified Intrusion Analyst
Domain 3Objective 3
Intrusion Detection System Rules GCIA Practice Questions (Page 8)
Part of the IDS Concepts and Architecture domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~17–29 in this domain), expect 6–10 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
8concepts
Questions 36–38
- 36
An analyst is tuning a rule that detects a brute-force attack. The rule currently alerts on every failed login attempt, generating thousands of alerts. The analyst wants to reduce the alert volume while still detecting the attack. Which approach is most effective?
Select an answer first - 37
Which rule option is used to assign a classification to a rule?
Select an answer first - 38
Which rule option is used to search for a specific byte sequence in the packet payload?
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to GCIA
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIA” is a trademark of its owner, used for identification only.