Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCED Exam - Topic 3 Question 18 Discussion

Posted by Rosio on May 09, 2022 at 06:31 AM

Which type of attack could be used to obtain IOS router configuration files without a valid user password?

Suggested Answer: D

TFTP is a protocol to transfer files and commonly used with routers for configuration files, IOS images, and more. It requires no authentication. To download a file you need only know (or guess) its name. CDP, SNMP and ARP are not used for accessing or transferring IOS configuration files.


Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
15 comments · newest first
HA
Hayley 11 months ago
TFTP brute force could work, but it's not the best option.
NI
Niesha 11 months ago
Wait, can you really get config files without a password?
DA
Darrin 12 months ago
ARP cache poisoning is a classic method too!
IS
Isadora 12 months ago
I disagree, SNMP man in the middle seems more likely.
GL
Gladis 12 months ago
I think it's definitely CDP sniffing.
TA
Tammara 1 year ago
ARP cache poisoning sounds familiar, but I don't think it directly relates to obtaining configuration files without a password.
SC
Scarlet 1 year ago
I feel like TFTP brute force might work, but I thought that required some level of access first.
LU
Luz 1 year ago
I think CDP sniffing could be a possibility since it can expose device information, but I can't recall the specifics.
EL
Elmer 1 year ago
I remember studying about SNMP vulnerabilities, but I'm not sure if that's the right answer here.
LO
Loreta 1 year ago
Okay, I've got this. The purpose of an information security policy is to provide direction and support to management regarding information security. That's option B, and it's the most comprehensive description.
BL
Blythe 1 year ago
Hmm, I'm a bit unsure about the storage requirements for a scale-out SAP HANA setup with a standby node. I'll need to review my notes on Azure storage options.
MI
Mira 1 year ago
I'm a bit confused by this question. Is it asking about the output or the purpose of use case development? I'm not entirely sure which aspect they want me to focus on. I'll have to make an educated guess here.
EZ
Ezekiel 1 year ago
I think it might be the CCMA. I remember something about it managing real-time databases.
CE
Celestina 1 year ago
I feel like I read about optimizing services in the .yaml file; option D seems relevant, but I would need to double-check that.
KI
Kip 1 year ago
Hmm, this is a tough one. Enabling Outlook integration could be a good way to store the documents, but the question specifically says the company wants to keep the costs low. I'll need to think of a solution that doesn't add a lot of extra expenses.
0/2000 characters

Save Cancel