GIAC Certified Incident Handler
Domain 5Objective 2
SMB Security GCIH Practice Questions (Page 5)
Part of the Network and Infrastructure Security domain, which makes up ~14% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~13–22 in this domain), expect 7–11 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
7concepts
Questions 21–25
- 21
A company is implementing a security baseline for all Windows file servers. The baseline must prevent SMB relay attacks and ensure data confidentiality. Which combination of settings should be included in the baseline?
Select an answer first - 22
A Windows administrator is configuring a new file server for a department that uses a mix of Windows 10 and Windows 7 clients. The administrator wants to ensure the highest level of SMB security while maintaining compatibility with all clients. Which SMB configuration should be used?
Select an answer first - 23
A security analyst is investigating an SMB brute-force attack. The analyst sees many SMB2 SESSION_SETUP requests with NTLMSSP_NEGOTIATE messages. Which tool is the attacker most likely using?
Select an answer first - 24
Which authentication protocol is commonly used by SMB in Active Directory environments and is considered more secure than NTLM?
Select an answer first - 25
A company has a mix of Windows and Linux systems. The Linux systems use Samba to provide SMB file sharing. The security team wants to ensure SMB traffic is encrypted. Which Samba configuration setting should be used?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIH” is a trademark of its owner, used for identification only.