GIAC GCED Exam - Topic 4 Question 33 Discussion

Actual exam question for GIAC's GCED exam

Question #: 33
Topic #: 4

[All GCED Questions]

Which of the following applies to newer versions of IOS that decrease their attack surface?

ATelnet cannot be enabled or used

BThe Cisco Discovery Protocol has been removed

CMore services are disabled by default

DTwo-factor authentication is default required

Show Suggested Answer

Suggested Answer: C

Recent versions of IOS have less services enabled by default, older versions vary but generally have more services (even those not needed) enabled by default; this increases the attack surface on the device.

by Lashaunda at Feb 10, 2024, 04:50 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elbert

3 months ago

Totally agree with C, more services off means less risk!

upvoted 0 times

...

Lamonica

3 months ago

B is correct, CDP is gone in newer IOS versions.

upvoted 0 times

...

Lisbeth

3 months ago

Wait, are we sure about D? Two-factor is not always default.

upvoted 0 times

...

Cordie

4 months ago

I think C is the most important change.

upvoted 0 times

...

Francisca

4 months ago

A is definitely true, no more Telnet!

upvoted 0 times

...

Dahlia

4 months ago

I feel like the Cisco Discovery Protocol being removed was mentioned in a study guide, but I’m not sure if that directly relates to the attack surface reduction.

upvoted 0 times

...

Lynelle

4 months ago

I practiced a question similar to this where they mentioned two-factor authentication, but I can’t recall if it’s required by default in newer IOS versions.

upvoted 0 times

...

Marguerita

4 months ago

I think Telnet being disabled is a big deal, but I’m not confident if it’s the only thing that reduces the attack surface.

upvoted 0 times

...

Kenny

5 months ago

I remember reading that newer IOS versions have more services disabled by default, but I’m not sure if that’s the main point here.

upvoted 0 times

...

Shalon

5 months ago

Ah, I remember this topic from the lectures. I believe the correct answer is C - newer IOS versions disable more unnecessary services to minimize the attack surface. Sounds like a good security practice.

upvoted 0 times

...

Rickie

5 months ago

Okay, let me see. I remember learning that Telnet is no longer enabled by default, so that's probably A. But I'm not certain about the other options. I'll have to review my notes.

upvoted 0 times

...

Izetta

5 months ago

Hmm, I'm not sure about this one. I know newer IOS versions have security improvements, but I'm not totally clear on the specifics. I'll have to think this through carefully.

upvoted 0 times

...

Elenore

5 months ago

This question seems straightforward, I think the answer is C - more services are disabled by default in newer IOS versions to reduce the attack surface.

upvoted 0 times

...

Laticia

5 months ago

The key here is that the plan includes the room and all meals. That makes me think "inclusive plan" is the correct answer. I'm feeling pretty good about that choice.

upvoted 0 times

...

Ronnie

5 months ago

Hmm, I'm a bit confused by the wording of the question. It's talking about "dashboard tools" and "critical processes" but I'm not sure exactly what it's asking us to identify. I'll need to read through it a few more times to make sure I understand.

upvoted 0 times

...

Paulina

5 months ago

Implementing an agile approach to avoid using a fixed budget could be an interesting option, but I'm not sure if that's the best fit for this particular project.

upvoted 0 times

...

Brice

5 months ago

I'm pretty sure this is about competitive bidding - that's where everyone gets a fair shot at the contract, right?

upvoted 0 times

...

Talia

5 months ago

I'm pretty confident the answer is True. We can definitely rename standard Tabs and Objects in Salesforce, it's a common admin task. I'll mark that as my final answer.

upvoted 0 times

...

Paola

2 years ago

I agree with Lavelle and Cheryll. Having more services disabled and requiring two-factor authentication would definitely help decrease the attack surface.

upvoted 0 times

...

Cheryll

2 years ago

I believe it could also be D) Two-factor authentication is default required. It adds an extra layer of security.

upvoted 0 times

...

Lavelle

2 years ago

I think the answer is C) More services are disabled by default. It makes sense to reduce the attack surface.

upvoted 0 times

...