Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCED Exam - Topic 9 Question 10 Discussion

The security team wants to detect connections that can compromise credentials by sending them in plaintext across the wire. Which of the following rules should they enable on their IDS sensor?
C) alert tcp any 23 <> any 23 (msg:Telnet shell; class type:misc-attack;sid:100; rev:1;)
A) alert tcp any 22 <> any 22 (msg:SSH connection; class type:misc-attack;sid: 122:rev:1;)
B) alert tcp any any <> any 6000: (msg:X-Windows session; flow:from_server,established;nocase;classtype:misc-attack;sid:101;rev:1;)
D) alert udp any any <> any 5060 (msg:VOIP message; classtype:misc-attack;sid:113; rev:2;)

GIAC GCED Exam - Topic 9 Question 10 Discussion

Actual exam question for GIAC's GCED exam
Question #: 10
Topic #: 9
[All GCED Questions]

The security team wants to detect connections that can compromise credentials by sending them in plaintext across the wire. Which of the following rules should they enable on their IDS sensor?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Dick at May 04, 2022, 05:38 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Isadora
8 months ago
Option A is also important, but it’s SSH, not plaintext.
upvoted 0 times
...
Hailey
8 months ago
Wow, I didn’t realize how many protocols still use plaintext!
upvoted 0 times
...
Bettyann
9 months ago
I’m not so sure, isn’t SSH safer than Telnet?
upvoted 0 times
...
Danica
9 months ago
Totally agree, Telnet is a big no-no for security!
upvoted 0 times
...
Malissa
9 months ago
Option C is the one to go for, Telnet sends data in plaintext.
upvoted 0 times
...
Toshia
9 months ago
I could be wrong, but I think the X-Windows session in option B might not be related to credential compromise like Telnet is.
upvoted 0 times
...
Kirby
9 months ago
I practiced a similar question, and I think option C is the right choice because Telnet is known for sending data in plaintext.
upvoted 0 times
...
Lilli
9 months ago
I remember studying about plaintext vulnerabilities, and I think Telnet is a big one since it sends credentials unencrypted.
upvoted 0 times
...
Selma
9 months ago
I'm not entirely sure, but I feel like SSH connections are secure, so maybe the answer isn't A?
upvoted 0 times
...
Ivette
9 months ago
I've got a good feeling about this. I'm going to go with my instinct and select the answer I think is correct.
upvoted 0 times
...
Maile
9 months ago
Wait, what's the difference between useradd and adduser? I'm a little confused about which one to use. And is there a way to verify that the user was created correctly?
upvoted 0 times
...

Save Cancel