Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCED Exam - Topic 3 Question 18 Discussion

Which type of attack could be used to obtain IOS router configuration files without a valid user password?
D) TFTP brute force
A) ARP cache poisoning
B) CDP sniffing
C) SNMP man in the middle

GIAC GCED Exam - Topic 3 Question 18 Discussion

Actual exam question for GIAC's GCED exam
Question #: 18
Topic #: 3
[All GCED Questions]

Which type of attack could be used to obtain IOS router configuration files without a valid user password?

Show Suggested Answer Hide Answer
Suggested Answer: D

TFTP is a protocol to transfer files and commonly used with routers for configuration files, IOS images, and more. It requires no authentication. To download a file you need only know (or guess) its name. CDP, SNMP and ARP are not used for accessing or transferring IOS configuration files.


by Rosio at May 09, 2022, 06:31 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Hayley
9 months ago
TFTP brute force could work, but it's not the best option.
upvoted 0 times
...
Niesha
9 months ago
Wait, can you really get config files without a password?
upvoted 0 times
...
Darrin
10 months ago
ARP cache poisoning is a classic method too!
upvoted 0 times
...
Isadora
10 months ago
I disagree, SNMP man in the middle seems more likely.
upvoted 0 times
...
Gladis
10 months ago
I think it's definitely CDP sniffing.
upvoted 0 times
...
Tammara
10 months ago
ARP cache poisoning sounds familiar, but I don't think it directly relates to obtaining configuration files without a password.
upvoted 0 times
...
Scarlet
10 months ago
I feel like TFTP brute force might work, but I thought that required some level of access first.
upvoted 0 times
...
Luz
10 months ago
I think CDP sniffing could be a possibility since it can expose device information, but I can't recall the specifics.
upvoted 0 times
...
Elmer
10 months ago
I remember studying about SNMP vulnerabilities, but I'm not sure if that's the right answer here.
upvoted 0 times
...
Loreta
10 months ago
Okay, I've got this. The purpose of an information security policy is to provide direction and support to management regarding information security. That's option B, and it's the most comprehensive description.
upvoted 0 times
...
Blythe
10 months ago
Hmm, I'm a bit unsure about the storage requirements for a scale-out SAP HANA setup with a standby node. I'll need to review my notes on Azure storage options.
upvoted 0 times
...
Mira
10 months ago
I'm a bit confused by this question. Is it asking about the output or the purpose of use case development? I'm not entirely sure which aspect they want me to focus on. I'll have to make an educated guess here.
upvoted 0 times
...
Ezekiel
10 months ago
I think it might be the CCMA. I remember something about it managing real-time databases.
upvoted 0 times
...
Celestina
10 months ago
I feel like I read about optimizing services in the .yaml file; option D seems relevant, but I would need to double-check that.
upvoted 0 times
...
Kip
10 months ago
Hmm, this is a tough one. Enabling Outlook integration could be a good way to store the documents, but the question specifically says the company wants to keep the costs low. I'll need to think of a solution that doesn't add a lot of extra expenses.
upvoted 0 times
...

Save Cancel