GIAC GCED Exam - Topic 8 Question 21 Discussion

Actual exam question for GIAC's GCED exam

Question #: 21
Topic #: 8

A company classifies data using document footers, labeling each file with security labels ''Public'', ''Pattern'', or ''Company Proprietary''. A new policy forbids sending ''Company Proprietary'' files via email. Which control could help security analysis identify breaches of this policy?

AMonitoring failed authentications on a central logging device

BEnforcing TLS encryption for outbound email with attachments

CBlocking email attachments that match the hashes of the company's classification templates

DRunning custom keyword scans on outbound SMTP traffic from the mail server

Show Suggested Answer

Suggested Answer: D

by Roosevelt at May 04, 2022, 09:17 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Geoffrey

7 months ago

A won't help with this specific policy breach at all.

upvoted 0 times

...

Teddy

7 months ago

D could also work, but it might miss some files.

upvoted 0 times

...

Brett

7 months ago

Really? Can it actually identify all proprietary files?

upvoted 0 times

...

Ellsworth

8 months ago

I agree, blocking those attachments is crucial!

upvoted 0 times

...

Arlette

8 months ago

C seems like the best option to catch those files.

upvoted 0 times

...

Colby

8 months ago

I’m a bit confused about the options. I thought TLS encryption was more about securing data in transit rather than preventing breaches.

upvoted 0 times

...

Pok

8 months ago

I feel like we practiced a question similar to this, and I lean towards option C as the most direct way to enforce the policy.

upvoted 0 times

...

Lynelle

8 months ago

I'm not entirely sure, but I remember something about monitoring SMTP traffic. Could that relate to option D?

upvoted 0 times

...

Fallon

8 months ago

I think option C sounds familiar because we discussed blocking attachments based on specific criteria in class.

upvoted 0 times

...

Aimee

8 months ago

Okay, let's see. I'm leaning towards B - enabling debug logging could help us pinpoint the issue.

upvoted 0 times

...

Lavera

8 months ago

I've got this one! The answer is Walls. The Copy/Monitor tool is focused on elements like floors, ceilings, and other building components, but Walls is not an option that would be available for that particular tool. Easy peasy!

upvoted 0 times

...

Zoila

8 months ago

Okay, I've got a strategy for this. I know the upgrade guide will be in an official Oracle knowledge base, so that rules out A, B, and C. D and E both sound promising, but MetaLink is specifically for Oracle product support, so I think that's the best bet.

upvoted 0 times

...