Discuss GIAC GCED Exam Topic 8 Question 21

A company classifies data using document footers, labeling each file with security labels ''Public'', ''Pattern'', or ''Company Proprietary''. A new policy forbids sending ''Company Proprietary'' files via email. Which control could help security analysis identify breaches of this policy?

AMonitoring failed authentications on a central logging device

BEnforcing TLS encryption for outbound email with attachments

CBlocking email attachments that match the hashes of the company's classification templates

DRunning custom keyword scans on outbound SMTP traffic from the mail server

Suggested Answer: D

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Geoffrey 11 months ago

A won't help with this specific policy breach at all.

Teddy 11 months ago

D could also work, but it might miss some files.

Brett 12 months ago

Really? Can it actually identify all proprietary files?

Ellsworth 12 months ago

I agree, blocking those attachments is crucial!

Arlette 12 months ago

C seems like the best option to catch those files.

Colby 1 year ago

I’m a bit confused about the options. I thought TLS encryption was more about securing data in transit rather than preventing breaches.

Pok 1 year ago

I feel like we practiced a question similar to this, and I lean towards option C as the most direct way to enforce the policy.

Lynelle 1 year ago

I'm not entirely sure, but I remember something about monitoring SMTP traffic. Could that relate to option D?

Fallon 1 year ago

I think option C sounds familiar because we discussed blocking attachments based on specific criteria in class.

Aimee 1 year ago

Okay, let's see. I'm leaning towards B - enabling debug logging could help us pinpoint the issue.

Lavera 1 year ago

I've got this one! The answer is Walls. The Copy/Monitor tool is focused on elements like floors, ceilings, and other building components, but Walls is not an option that would be available for that particular tool. Easy peasy!

Zoila 1 year ago

Okay, I've got a strategy for this. I know the upgrade guide will be in an official Oracle knowledge base, so that rules out A, B, and C. D and E both sound promising, but MetaLink is specifically for Oracle product support, so I think that's the best bet.

GIAC GCED Exam - Topic 8 Question 21 Discussion