GIAC GSEC Exam - Topic 5 Question 63 Discussion

Actual exam question for GIAC's GSEC exam

Question #: 63
Topic #: 5

[All GSEC Questions]

You are examining a packet capture session in Wire shark and see the packet shown in the accompanying image. Based on what you see, what is the appropriate protection against this type of attempted attack?

ABlock DNS traffic across the router

BDisable forwarding of unsolicited TCP requests

CDisable IP-directed broadcast requests

DBlock UDP packets at the firewall

Show Suggested Answer

Suggested Answer: G

by Leonora at Jan 15, 2025, 06:31 AM

Limited Time Offer

25%

Off

Get Premium GSEC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bethanie

3 months ago

Wait, are we really considering blocking DNS? That seems risky!

upvoted 0 times

...

Joseph

3 months ago

Definitely disable IP-directed broadcasts, that's a must!

upvoted 0 times

...

Mireya

3 months ago

Isn't blocking DNS traffic a bit extreme?

upvoted 0 times

...

Vanna

4 months ago

Disagree, I’d go for disabling unsolicited TCP requests instead.

upvoted 0 times

...

Gary

4 months ago

I think blocking UDP packets is a solid move.

upvoted 0 times

...

Marta

4 months ago

Blocking UDP packets at the firewall seems like a common recommendation, but I wonder if that would affect other services we need.

upvoted 0 times

...

Melvin

4 months ago

I feel like disabling IP-directed broadcast requests was mentioned in a practice question, but I can't recall the exact context.

upvoted 0 times

...

Maurine

4 months ago

I think disabling unsolicited TCP requests could help, but I'm not entirely sure if that's the right approach for this specific attack.

upvoted 0 times

...

Ellen

5 months ago

I remember we discussed how blocking DNS traffic might not be the best solution since it can disrupt legitimate requests.

upvoted 0 times

...

Alise

5 months ago

This is a good opportunity to demonstrate my understanding of network security. I'll carefully consider each option and select the most appropriate protection.

upvoted 0 times

...

Katlyn

5 months ago

Based on the options, I'm leaning towards disabling forwarding of unsolicited TCP requests (option B). That seems like a targeted way to address the issue.

upvoted 0 times

...

Chu

5 months ago

I'm a bit confused by the question. Does the packet capture indicate a specific type of attack? I'll need to review the details more closely.

upvoted 0 times

...

Justa

5 months ago

Hmm, the image shows a DNS packet, so I'm thinking option A might be the way to go. Blocking DNS traffic could help prevent this type of attack.

upvoted 0 times

...

Robt

5 months ago

This looks like a tricky one. I'll need to carefully examine the packet capture to determine the appropriate protection.

upvoted 0 times

...

Blossom

9 months ago

Disable IP-directed broadcast requests, huh? I'm just picturing a bunch of disgruntled packets, knocking on the door, going 'Hey, we were directed here, what gives?'

upvoted 0 times

Heike

8 months ago

D) Block UDP packets at the firewall

upvoted 0 times

...

Frankie

8 months ago

C) Disable IP-directed broadcast requests

upvoted 0 times

...

Hoa

8 months ago

B) Disable forwarding of unsolicited TCP requests

upvoted 0 times

...

Yoko

8 months ago

A) Block DNS traffic across the router

upvoted 0 times

...

Leota

8 months ago

C) Disable IP-directed broadcast requests

upvoted 0 times

...

Leontine

9 months ago

B) Disable forwarding of unsolicited TCP requests

upvoted 0 times

...

Andrew

9 months ago

A) Block DNS traffic across the router

upvoted 0 times

...

Dominque

10 months ago

I'm feeling like a real Sherlock Holmes here, analyzing this packet capture. Disable IP-directed broadcasts, that's the answer - elementary, my dear Watson!

upvoted 0 times

Izetta

8 months ago

C) Disable IP-directed broadcast requests

upvoted 0 times

...

Stephania

9 months ago

B) Disable forwarding of unsolicited TCP requests

upvoted 0 times

...

Jeannetta

9 months ago

A) Block DNS traffic across the router

upvoted 0 times

...

Antione

10 months ago

Ah, the age-old debate: should I block the UDP or the firewall? I say, why not both? Double the protection, double the fun!

upvoted 0 times

Blair

9 months ago

User 3: Why not do both? Double the protection, double the fun!

upvoted 0 times

...

Henriette

9 months ago

User 2: I agree, but we should also disable IP-directed broadcast requests for extra security.

upvoted 0 times

...

Phil

9 months ago

User 1: I think blocking UDP packets at the firewall is the way to go.

upvoted 0 times

...

Miesha

10 months ago

Blocking DNS traffic? That's like trying to stop a freight train with a rubber band. Disable that TCP forwarding, that's where it's at!

upvoted 0 times

Dean

8 months ago

D) Block UDP packets at the firewall

upvoted 0 times

...

Freida

8 months ago

C) Disable IP-directed broadcast requests

upvoted 0 times

...

Dominga

9 months ago

B) Disable forwarding of unsolicited TCP requests

upvoted 0 times

...

Andree

9 months ago

A) Block DNS traffic across the router

upvoted 0 times

...

Paris

11 months ago

Hmm, based on the packet capture, I'd say disabling IP-directed broadcast requests is the way to go. Gotta shut down those unsolicited packets at the source!

upvoted 0 times