Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCED Exam - Topic 8 Question 21 Discussion

A company classifies data using document footers, labeling each file with security labels ''Public'', ''Pattern'', or ''Company Proprietary''. A new policy forbids sending ''Company Proprietary'' files via email. Which control could help security analysis identify breaches of this policy?
D) Running custom keyword scans on outbound SMTP traffic from the mail server
A) Monitoring failed authentications on a central logging device
B) Enforcing TLS encryption for outbound email with attachments
C) Blocking email attachments that match the hashes of the company's classification templates

GIAC GCED Exam - Topic 8 Question 21 Discussion

Actual exam question for GIAC's GCED exam
Question #: 21
Topic #: 8
[All GCED Questions]

A company classifies data using document footers, labeling each file with security labels ''Public'', ''Pattern'', or ''Company Proprietary''. A new policy forbids sending ''Company Proprietary'' files via email. Which control could help security analysis identify breaches of this policy?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

0/2000 characters
Geoffrey
9 months ago
A won't help with this specific policy breach at all.
upvoted 0 times
...
Teddy
9 months ago
D could also work, but it might miss some files.
upvoted 0 times
...
Brett
10 months ago
Really? Can it actually identify all proprietary files?
upvoted 0 times
...
Ellsworth
10 months ago
I agree, blocking those attachments is crucial!
upvoted 0 times
...
Arlette
10 months ago
C seems like the best option to catch those files.
upvoted 0 times
...
Colby
10 months ago
I’m a bit confused about the options. I thought TLS encryption was more about securing data in transit rather than preventing breaches.
upvoted 0 times
...
Pok
10 months ago
I feel like we practiced a question similar to this, and I lean towards option C as the most direct way to enforce the policy.
upvoted 0 times
...
Lynelle
10 months ago
I'm not entirely sure, but I remember something about monitoring SMTP traffic. Could that relate to option D?
upvoted 0 times
...
Fallon
10 months ago
I think option C sounds familiar because we discussed blocking attachments based on specific criteria in class.
upvoted 0 times
...
Aimee
10 months ago
Okay, let's see. I'm leaning towards B - enabling debug logging could help us pinpoint the issue.
upvoted 0 times
...
Lavera
10 months ago
I've got this one! The answer is Walls. The Copy/Monitor tool is focused on elements like floors, ceilings, and other building components, but Walls is not an option that would be available for that particular tool. Easy peasy!
upvoted 0 times
...
Zoila
10 months ago
Okay, I've got a strategy for this. I know the upgrade guide will be in an official Oracle knowledge base, so that rules out A, B, and C. D and E both sound promising, but MetaLink is specifically for Oracle product support, so I think that's the best bet.
upvoted 0 times
...

Save Cancel