Discuss GIAC GCED Exam Topic 6 Question 58

Which could be described as a Threat Vector?

AA web server left6 unpatched and vulnerable to XSS

BA coding error allowing remote code execution

CA botnet that has infiltrated perimeter defenses

DA wireless network left open for anonymous use

Suggested Answer: A

A company needs to classify its information as a key step in valuing it and knowing where to focus its protection.

Rotation of duties and separation of duties are both key elements in reducing the scope of information access and the ability to conceal malicious behavior.

Separation of duties helps minimize ''empire building'' within a company, keeping one individual from controlling a great deal of information, reducing the insider threat.

Security awareness programs can help other employees notice the signs of an insider attack and thus reduce the insider threat.

Detection is a reactive method and only occurs after an attack occurs. Only preventative methods can stop or limit an attack.

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

29 comments · newest first

Sonia 10 months ago

Wait, can a coding error really lead to remote code execution? Sounds risky!

Felix 11 months ago

D? Really? I thought that was just bad practice, not a threat vector.

Willie 11 months ago

C seems pretty serious, a botnet is no joke.

Cherrie 11 months ago

B is also a threat vector, can't overlook that.

Carri 11 months ago

Definitely A, that's a classic example!

Marion 11 months ago

I practiced a similar question, and I think option C is definitely a threat vector since a botnet can be used to launch attacks once it gets in.

Effie 12 months ago

I’m a bit confused here. I thought a coding error like in option B could also be a threat vector, but I’m not sure if it fits the definition exactly.

Arthur 12 months ago

I remember studying about threat vectors, and I feel like option D fits because an open wireless network can be easily attacked.

Gracia 12 months ago

I think a threat vector is something that can be exploited, so maybe options A or C? But I'm not entirely sure.

Leota 12 months ago

I've got this! A threat vector is a path or means by which a threat can enter, exploit, or otherwise affect a system. Based on that, I'd say option A or B are the best answers here.

Valentin 12 months ago

All of these sound like potential security vulnerabilities, but I'm not sure which one best fits the definition of a "threat vector". I'll have to review my notes.

Alesia 12 months ago

Okay, let me see... A threat vector is a way that a threat can enter a system, so I'll need to analyze each option for that.

Stefanie 12 months ago

Hmm, I'm not entirely sure what a "threat vector" is. I'll need to think this through carefully.

Peggie 1 year ago

This question seems straightforward, I'm confident I can identify a threat vector from the options provided.

Gracia 1 year ago

I'm going to go with D. A wireless network left open for anonymous use? That's just begging to be used for nefarious purposes. Might as well hand over the keys to the kingdom.

Stefany 1 year ago

Hah, I bet the answer is A. That's like leaving the front door wide open and then wondering why the burglar got in. Classic rookie mistake.

Cordie 1 year ago

Well, I think all of these options are valid threat vectors, but I'd say A is the most straightforward. Leaving a web server unpatched and vulnerable to XSS is just asking for trouble.

Katina 1 year ago

↳ replying to Cordie

A wireless network left open for anonymous use can be easily exploited by attackers.

Kristal 1 year ago

↳ replying to Cordie

A botnet that has infiltrated perimeter defenses can cause a lot of damage too.

Therese 1 year ago

↳ replying to Cordie

I think a coding error allowing remote code execution is also a major threat vector.

Ciara 1 year ago

↳ replying to Cordie

I agree, having an unpatched web server is a huge security risk.

Cherry 1 year ago

I'm going with B. A coding error that allows remote code execution is a major vulnerability that hackers can easily take advantage of.

Luke 1 year ago

Definitely option C. A botnet that has infiltrated the perimeter defenses is a classic threat vector that cybercriminals love to exploit.

Glory 1 year ago

↳ replying to Luke

I would say option A is a significant threat vector as well, leaving a web server unpatched can lead to XSS attacks.

Helene 1 year ago

↳ replying to Luke

I think option B is also a major threat vector, allowing remote code execution can be very dangerous.

Kenda 1 year ago

↳ replying to Luke

I agree, a botnet that has infiltrated perimeter defenses is a serious threat.

Francisca 1 year ago

I think C) A botnet that has infiltrated perimeter defenses is also a major Threat Vector.

Diane 2 years ago

I agree with Reita. A web server with XSS vulnerability is definitely a threat.

Reita 2 years ago

I think A) A web server left unpatched and vulnerable to XSS could be a Threat Vector.

GIAC GCED Exam - Topic 6 Question 58 Discussion