GIAC GCED Exam - Topic 3 Question 18 Discussion

Actual exam question for GIAC's GCED exam

Question #: 18
Topic #: 3

[All GCED Questions]

Which type of attack could be used to obtain IOS router configuration files without a valid user password?

AARP cache poisoning

BCDP sniffing

CSNMP man in the middle

DTFTP brute force

Show Suggested Answer

Suggested Answer: D

TFTP is a protocol to transfer files and commonly used with routers for configuration files, IOS images, and more. It requires no authentication. To download a file you need only know (or guess) its name. CDP, SNMP and ARP are not used for accessing or transferring IOS configuration files.

by Rosio at May 09, 2022, 06:31 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hayley

4 months ago

TFTP brute force could work, but it's not the best option.

upvoted 0 times

...

Niesha

4 months ago

Wait, can you really get config files without a password?

upvoted 0 times

...

Darrin

4 months ago

ARP cache poisoning is a classic method too!

upvoted 0 times

...

Isadora

4 months ago

I disagree, SNMP man in the middle seems more likely.

upvoted 0 times

...

Gladis

5 months ago

I think it's definitely CDP sniffing.

upvoted 0 times

...

Tammara

5 months ago

ARP cache poisoning sounds familiar, but I don't think it directly relates to obtaining configuration files without a password.

upvoted 0 times

...

Scarlet

5 months ago

I feel like TFTP brute force might work, but I thought that required some level of access first.

upvoted 0 times

...

Luz

5 months ago

I think CDP sniffing could be a possibility since it can expose device information, but I can't recall the specifics.

upvoted 0 times

...

Elmer

5 months ago

I remember studying about SNMP vulnerabilities, but I'm not sure if that's the right answer here.

upvoted 0 times

...

Loreta

5 months ago

Okay, I've got this. The purpose of an information security policy is to provide direction and support to management regarding information security. That's option B, and it's the most comprehensive description.

upvoted 0 times

...

Blythe

5 months ago

Hmm, I'm a bit unsure about the storage requirements for a scale-out SAP HANA setup with a standby node. I'll need to review my notes on Azure storage options.

upvoted 0 times

...

Mira

5 months ago

I'm a bit confused by this question. Is it asking about the output or the purpose of use case development? I'm not entirely sure which aspect they want me to focus on. I'll have to make an educated guess here.

upvoted 0 times

...

Ezekiel

5 months ago

I think it might be the CCMA. I remember something about it managing real-time databases.

upvoted 0 times

...

Celestina

5 months ago

I feel like I read about optimizing services in the .yaml file; option D seems relevant, but I would need to double-check that.

upvoted 0 times

...

Kip

5 months ago

Hmm, this is a tough one. Enabling Outlook integration could be a good way to store the documents, but the question specifically says the company wants to keep the costs low. I'll need to think of a solution that doesn't add a lot of extra expenses.

upvoted 0 times

...