Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCED Exam - Topic 7 Question 57 Discussion

A security device processes the first packet from 10.62.34.12 destined to 10.23.10.7 and recognizes a malicious anomaly. The first packet makes it to 10.23.10.7 before the security devices sends a TCP RST to 10.62.34.12. What type of security device is this?
D) Network access control
A) Host IDS
B) Active response
C) Intrusion prevention

GIAC GCED Exam - Topic 7 Question 57 Discussion

Actual exam question for GIAC's GCED exam
Question #: 57
Topic #: 7
[All GCED Questions]

A security device processes the first packet from 10.62.34.12 destined to 10.23.10.7 and recognizes a malicious anomaly. The first packet makes it to 10.23.10.7 before the security devices sends a TCP RST to 10.62.34.12. What type of security device is this?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Kayleigh at Jan 13, 2025, 08:53 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Daron
8 months ago
Pretty sure it's not Network access control.
upvoted 0 times
...
Gladys
9 months ago
Wait, how can it send a TCP RST after the packet gets through?
upvoted 0 times
...
Virgina
9 months ago
I thought it was just a Host IDS?
upvoted 0 times
...
Johna
9 months ago
Definitely an active response!
upvoted 0 times
...
Audry
9 months ago
Sounds like an Intrusion prevention system to me.
upvoted 0 times
...
Dorsey
9 months ago
I feel like this is definitely related to intrusion prevention, but I could see how it might also be interpreted as active response.
upvoted 0 times
...
Wilda
10 months ago
I’m a bit confused. Is it possible for a host IDS to send a TCP RST? I thought they just monitored traffic.
upvoted 0 times
...
Dominga
10 months ago
This sounds like a question we practiced in class! I think it might be an active response since it sends a TCP RST.
upvoted 0 times
...
Lindy
10 months ago
I remember studying about intrusion prevention systems, but I'm not sure if that's the right answer here.
upvoted 0 times
...
Lindsey
10 months ago
This has got to be an intrusion prevention system (IPS). The key giveaway is the security device actively sending the TCP RST to the source IP to block the traffic after detecting a malicious anomaly. That's the textbook behavior of an IPS.
upvoted 0 times
...
Edwin
10 months ago
I'm a little confused by this question. The details about the security device's actions don't seem to fully match the answer choices provided. I'll need to review my notes on the different types of security devices to figure out the best answer here.
upvoted 0 times
...
Evan
10 months ago
Okay, I've got this. The security device is clearly an IPS since it actively blocked the traffic by sending the TCP RST. The fact that the first packet got through is just because of the way IPS systems work - they detect and respond to threats in real-time.
upvoted 0 times
...
Whitley
10 months ago
Hmm, I'm a bit unsure about this one. The fact that the first packet still made it to the destination before the security device responded makes me think it could also be a host-based IDS. I'll need to think this through a bit more.
upvoted 0 times
...
Cherelle
10 months ago
This seems like a classic intrusion prevention system (IPS) scenario. The key details are the security device detecting a malicious anomaly and then sending a TCP RST to the source, which indicates an active response to block the traffic.
upvoted 0 times
...
Heike
1 year ago
As a security professional, I'm impressed by this device's quick reflexes. But as a cat owner, I'm a little worried it might start randomly batting at my internet packets just for fun.
upvoted 0 times
Alyce
1 year ago
D) Network access control
upvoted 0 times
...
Regenia
1 year ago
C) Intrusion prevention
upvoted 0 times
...
Ming
1 year ago
B) Active response
upvoted 0 times
...
Naomi
1 year ago
A) Host IDS
upvoted 0 times
...
...
Eun
1 year ago
Network access control? Nah, this is way more advanced than that. This is a security device that can see into the packets, analyze them, and respond in real-time. I'm putting my money on Intrusion Prevention System.
upvoted 0 times
...
Dexter
1 year ago
I'm going with C, Intrusion Prevention System. The fact that it recognized the anomaly and took immediate action to stop the attack, but still let the first packet through, is a dead giveaway.
upvoted 0 times
...
Nu
1 year ago
Active response, for sure! Blocking the malicious traffic and sending a reset to the source is a classic active defense move. I bet the security team high-fived each other after that one.
upvoted 0 times
...
Genevive
1 year ago
Hmm, this seems like an intrusion prevention system (IPS) to me. It detected the malicious anomaly and sent a TCP RST to the source, but the first packet still made it to the destination. Gotta love those lightning-fast response times!
upvoted 0 times
Essie
1 year ago
C: I agree, IPS systems are crucial for protecting networks from malicious activity.
upvoted 0 times
...
Gianna
1 year ago
B: Yeah, it's impressive how quickly it responded to the threat.
upvoted 0 times
...
Nicolette
1 year ago
A: Definitely sounds like an intrusion prevention system (IPS) to me.
upvoted 0 times
...
...
Bernardine
1 year ago
I'm not sure, but it could also be Active response since it sent a TCP RST to the source.
upvoted 0 times
...
Annice
1 year ago
I agree with Monte, because it detected the malicious anomaly and took action to prevent it.
upvoted 0 times
...
Monte
1 year ago
I think the security device is an Intrusion prevention system.
upvoted 0 times
...

Save Cancel