최신GIAC Defensible Security Architect - GDSA무료샘플문제

A. Performing daily database schema backups

B. Assigning role-based permissions

C. Relying solely on encryption to secure data

D. Continuous auditing and monitoring of database access

A. Manually install patches on each laptop and restrict user access to the network

B. Disable all network access until the endpoints are updated

C. Automate the patching process for all endpoints and enforce multi-factor authentication (MFA) for all users

D. Allow users to update their devices when they are available and review the process after three months

A. Manages the physical movement of data servers

B. Controls access to data through mobile devices and ensures data protection regardless of location

C. Ensures that mobile applications are entertaining

D. Focuses only on data stored on desktop computers

A. Using only signature-based detection methods

B. Continuously monitoring network traffic for suspicious activities

C. Identifying trends and patterns indicative of potential threats

D. Analyzing encrypted traffic without decryption

A. Granting users full access to network resources once authenticated

B. Prioritizing external threats over internal ones

C. Allowing all traffic from trusted devices without further checks

D. Assuming every request is a potential security threat, even from within the network

A. Disabling all network monitoring to avoid false positives

B. Implementing micro-segmentation to limit lateral movement

C. Enforcing strict credential rotation policies

D. Automatically trusting all previously authenticated devices

A. Authenticating devices trying to access the network

B. Ensuring high network bandwidth

C. Preventing Distributed Denial of Service (DDoS) attacks

D. Encrypting all network traffic

A. Increasing the DHCP lease time to its maximum

B. Contaminating the DHCP pool with incorrect MAC to IP address mappings

C. Enhancing the DHCP server's efficiency by preallocating IP addresses

D. Exhausting all available IP addresses in the DHCP pool to deny legitimate devices

A. Monitoring network traffic for suspicious activity

B. Encrypting all outbound data

C. Blocking malicious traffic from reaching the network

D. Securing user authentication processes

A. Enabling DHCP snooping on all VLANs

B. Setting a native VLAN ID different from data VLANs

C. Disabling unused ports

D. Implementing VLAN trunking on all switches

A. VLAN hopping

B. Man-in-the-middle attack

C. ARP cache poisoning

D. Route injection attack