GIAC GCED Exam - Topic 9 Question 4 Discussion

Actual exam question for GIAC's GCED exam

Question #: 4
Topic #: 9

[All GCED Questions]

Analyze the screenshot below. Which of the following attacks can be mitigated by these configuration settings?

AA Denial-of-Service attack using network broadcasts

BA Replay attack

CAn IP masquerading attack

DA MAC Flood attack

Show Suggested Answer

Suggested Answer: D

Both BPDU Guard and Root Guard are used to prevent a new switch from becoming the Root Bridge. They are very similar but use different mechanisms.

Rootguard allows devices to use STP, but if they send superior BDPUs (i.e. they attempt to become the Root Bridge), Root Guard disables the port until the offending BPDUs cease. Recovery is automatic.

If Portfast is enabled on a port, BPDU Guard will disable the port if a BPDU is received. The port stays disabled until it is manually re-enabled. Devices behind such ports cannot use STP, as the port would be disabled as soon as they send BPDUs (which is the default behavior of switches).

by Glory at May 05, 2022, 09:50 AM

Limited Time Offer

25%

Off

Get Premium GCED Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leonora

4 months ago

Wait, I didn't know these settings could do that!

upvoted 0 times

...

Emerson

4 months ago

Agreed, but can it really stop IP masquerading?

upvoted 0 times

...

Karol

4 months ago

Not so sure about that, what about Replay attacks?

upvoted 0 times

...

Lilli

4 months ago

I think it also helps with MAC Flood attacks.

upvoted 0 times

...

Margurite

5 months ago

Definitely mitigates Denial-of-Service attacks.

upvoted 0 times

...

Novella

5 months ago

I believe the configuration could prevent an IP masquerading attack, but I need to double-check my notes on that one.

upvoted 0 times

...

Marlon

5 months ago

I'm a bit confused about the Replay attack. I thought those settings were more about network traffic than replay issues.

upvoted 0 times

...

Sheron

5 months ago

I remember practicing a similar question about MAC Flood attacks, and I feel like those settings could definitely mitigate that type of attack.

upvoted 0 times

...

Juliana

5 months ago

I think the settings might help with the Denial-of-Service attack, but I'm not entirely sure how they relate to network broadcasts specifically.

upvoted 0 times

...

German

5 months ago

The catalog is the clear winner here. That's where the administrator will find the most comprehensive and up-to-date information on the cloud provider's service offerings.

upvoted 0 times

...

Thaddeus

5 months ago

I'm pretty confident that Option B is the correct answer here. Changing the management port on the FMC and pushing that change to the FTD devices is the way to ensure they can all communicate.

upvoted 0 times

...

Gertude

5 months ago

Okay, I think I've got this. The key is to consider the different ways incidents can be created - either programmatically through the API or manually through the UI. The other options don't seem directly related to the incident configuration process.

upvoted 0 times

...

Audria

5 months ago

I think Cisco Expressway backs up log files and call states, but I'm not 100% sure if call states are included.

upvoted 0 times

...