GDSA試験無料問題集（184題）「GIAC Defensible Security Architect 認定」

出題：1

Which of the following is a common vulnerability associated with cloud-based environments?
Response:

A. High latency in data transmission

B. Misconfiguration of security settings in cloud services

C. Limited scalability of cloud resources

D. Lack of encryption for data at rest

正解：B 解答を投票する

出題：2

Which of the following are considered essential features of cloud-based security architecture?
(Select all that apply)
Response:

A. Encryption of data at rest and in transit

B. Identity and access management (IAM)

C. Physical security measures

D. Distributed Denial of Service (DDoS) mitigation

正解：A,B,D 解答を投票する

出題：3

Your organization has implemented a Zero Trust architecture to enhance network security. However, several systems are still relying on traditional perimeter defenses, which have become ineffective against advanced threats. To comply with the Zero Trust model, what immediate actions should your team prioritize to protect the organization's critical assets?
Response:

A. Implement micro-segmentation, enforce strong identity verification, and adopt the principle of least privilege

B. Disable all access to internal systems and require manual approvals for every request

C. Upgrade perimeter firewalls and focus on reducing network traffic

D. Decrease logging activities to focus on higher-priority events only

正解：A 解答を投票する

出題：4

DHCP starvation attack is aimed at:
Response:

A. Exhausting all available IP addresses in the DHCP pool to deny legitimate devices

B. Enhancing the DHCP server's efficiency by preallocating IP addresses

C. Contaminating the DHCP pool with incorrect MAC to IP address mappings

D. Increasing the DHCP lease time to its maximum

正解：A 解答を投票する

出題：5

What is the primary focus of data-centric security?
Response:

A. Protecting network perimeter only

B. Ensuring the physical security of data centers

C. Securing the data itself rather than the network or infrastructure

D. Installing antivirus software on all devices

正解：C 解答を投票する

出題：6

What is a key benefit of implementing network segmentation in a cloud environment?
Response:

A. Slower deployment times

B. Enhanced security

C. Reduced complexity

D. Increased cost

正解：B 解答を投票する

出題：7

Which protocol is often targeted in Layer 3 attacks due to its use in time synchronization across networks?
Response:

A. SMTP

B. SNMP

C. NTP

D. HTTP

正解：C 解答を投票する

出題：8

Which defenses can help mitigate the risk of Distributed Denial of Service (DDoS) attacks?
(Choose two)
Response:

A. Implementing Network Address Translation (NAT)

B. Deploying a Web Application Firewall (WAF)

C. Isolating internal networks using VLANs

D. Using rate-limiting to control incoming traffic

正解：B,D 解答を投票する

GDSA試験無料問題集「GIAC Defensible Security Architect 認定」