GIAC GCED Exam - Topic 8 Question 41 Discussion

Actual exam question for GIAC's GCED exam

Question #: 41
Topic #: 8

[All GCED Questions]

What information would the Wireshark filter in the screenshot list within the display window?

AOnly HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80

BOnly traffic to or from IP address 192.168.1.12 and destined for port 80

COnly traffic with a source address of 192.168.1.12 to or from port 80

DOnly traffic with a destination address of 192.168.1.12 to or from port 80

Show Suggested Answer

Suggested Answer: A

A company needs to classify its information as a key step in valuing it and knowing where to focus its protection.

Rotation of duties and separation of duties are both key elements in reducing the scope of information access and the ability to conceal malicious behavior.

Separation of duties helps minimize ''empire building'' within a company, keeping one individual from controlling a great deal of information, reducing the insider threat.

Security awareness programs can help other employees notice the signs of an insider attack and thus reduce the insider threat.

Detection is a reactive method and only occurs after an attack occurs. Only preventative methods can stop or limit an attack.

by Salley at Jun 03, 2024, 06:27 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ivette

6 months ago

I thought it was only for the source address, not destination.

upvoted 0 times

...

Howard

6 months ago

I agree, it should include both directions for port 80.

upvoted 0 times

...

Albina

6 months ago

Wait, is it really just HTTP traffic? That seems too specific.

upvoted 0 times

...

Jamey

7 months ago

I think it's only for traffic to port 80, not from it.

upvoted 0 times

...

Benton

7 months ago

It's definitely filtering for IP 192.168.1.12 and port 80.

upvoted 0 times

...

Reiko

7 months ago

I’m leaning towards option B because it mentions both directions, but I’m not completely confident about the wording.

upvoted 0 times

...

Venita

7 months ago

I feel like the question is asking about the source address, but I can't recall if it includes destination traffic too.

upvoted 0 times

...

Marquetta

8 months ago

I remember practicing a similar question, and I think it was about filtering traffic for a specific port. Could it be just for port 80?

upvoted 0 times

...

Golda

8 months ago

I think the filter is specifically for traffic to or from the IP address, but I'm not sure if it includes both directions.

upvoted 0 times

...

Tatum

8 months ago

I've got a good strategy for these types of Wireshark filter questions. I'll methodically evaluate each option to determine the correct answer.

upvoted 0 times

...

Mitsue

8 months ago

I'm a bit confused by the wording of the options. I'll need to re-read the question a few times to make sure I understand it fully.

upvoted 0 times

...

Terrilyn

8 months ago

Okay, let me break this down step-by-step. The key is understanding exactly what information the filter will display.

upvoted 0 times

...

Hermila

8 months ago

Hmm, I'm not totally sure about this one. I need to think through the different filter options carefully.

upvoted 0 times

...

Selma

8 months ago

This looks like a pretty straightforward Wireshark filter question. I think I can handle this one.

upvoted 0 times

...

Viva

8 months ago

Okay, let's see here. The first option about mouth IDS doesn't sound right to me. I'm not familiar with that term, so I'll skip that one.

upvoted 0 times

...

Providencia

8 months ago

Hmm, I'm a bit unsure about this one. I know there's a law of economics that deals with adding more labor, but I can't quite remember the name of it. I'll have to think this through carefully.

upvoted 0 times

...

Shelba

1 year ago

I bet the Wireshark filter is looking for traffic to or from 192.168.1.12 that's also destined for port 80 and includes a dancing unicorn. Just a hunch.

upvoted 0 times

...

Gail

1 year ago

Wait, isn't the filter looking for traffic with a destination address of 192.168.1.12 to or from port 80? Option D sounds like the correct one to me.

upvoted 0 times

...

Tegan

1 year ago

Hmm, I think the filter is specifically looking for traffic with a source address of 192.168.1.12 to or from port 80. Option C seems to be the answer here.

upvoted 0 times

Allene

11 months ago

You make a good point, option C does seem more inclusive.

upvoted 0 times

...

Belen

11 months ago

I think option A is too specific, option C covers a broader range of traffic.

upvoted 0 times

...

Jaclyn

12 months ago

But what about option A? It mentions HTTP traffic specifically.

upvoted 0 times

...

Weldon

12 months ago

I agree, option C seems to be the correct choice.

upvoted 0 times

...

Carolynn

1 year ago

I'm pretty sure the filter is looking for all traffic to or from 192.168.1.12 and port 80, not just HTTP. That's option B, right?

upvoted 0 times

France

11 months ago

User 3: Agreed, it's looking for traffic to or from that specific IP address and port.

upvoted 0 times

...

Tanesha

11 months ago

User 2: Yes, that's option B.

upvoted 0 times

...

Nichelle

12 months ago

User 1: I think the filter is for traffic to or from 192.168.1.12 and port 80.

upvoted 0 times

...

Ellen

1 year ago

The Wireshark filter in the screenshot would list only HTTP traffic to or from IP address 192.168.1.12 that is also destined for port 80. This is the correct answer - Option A.

upvoted 0 times