Free Preparation Discussions
MENU
GIAC GCED Exam Questions
- Topic 1: Demonstrate knowledge of penetration testing and vulnerability assessment processes/ Digital Forensics Concepts and Application
- Topic 2: Vulnerability Assessment and Penetration Testing Concepts/ Defensive Infrastructure and Tactics
- Topic 3: Demonstrate knowledge of devices that are used to monitor networks/ Demonstrate an understanding of methods and practices of digital forensics
- Topic 4: Demonstrate an understanding of using logs and flows in network forensics/ demonstrate an understanding of commonly-used network protocols
- Topic 5: Demonstrate an understanding of interactive malware behavior analysis/ Demonstrate knowledge of audit techniques and the Center for Internet Security's benchmarks
- Topic 6: Demonstrate an understanding of the various types of malware, identify symptoms of infection/ Demonstrate proficiency in identification of forensic artifacts
- Topic 7: Demonstrate an understanding of intrusion prevention systems, their placement in the enterprise/ Demonstrate an understanding of continuous incident response processes
- Topic 8: Demonstrate an understanding of and proficiency using penetration testing and vulnerability assessment tools/ Malware Analysis Concepts and Basic Analysis Techniques
- Topic 9: Demonstrate basic knowledge of network and cloud-based infrastructure defensive measures/ Demonstrate an understanding of manual code reversal of malware, disassembly and decompiling malware
Free GIAC GCED Exam Actual Questions
Note: Premium Questions for GCED were last updated On Apr. 21, 2025 (see below)
Which of the following is the best way to establish and verify the integrity of a file before copying it during an investigation?
Network administrators are often hesitant to patch the operating systems on CISCO router and switch operating systems, due to the possibility of causing network instability, mainly because of which of the following?
Many administrators are hesitant to upgrade the IOS on routers based on past experience with the code introducing instability into the network. It is often difficult to completely test an IOS software upgrade in a production environment because the monolithic kernel requires that the IOS be replaced before the device can be tested. Because of these reasons, IOS upgrades to resolve security flaws are often left undone in many organizations.
At the start of an investigation on a Windows system, the lead handler executes the following commands after inserting a USB drive. What is the purpose of this command? C:\ >dir / s / a dhsra d: \ > a: \ IRCD.txt
This command will create a text file on the collection media (in this case you would probably be using a USB flash drive) named IRCD.txt that should contain a recursive directory listing of all files on the desk.
What attack was indicated when the IDS system picked up the following text coming from the Internet to the web server?
select user, password from user where user= ''jdoe'' and password= 'myp@55!' union select ''text'',2 into outfile ''/tmp/file1.txt'' - - '
An example of manipulating SQL statements to perform SQL injection includes using the semi-colon to perform multiple queries. The following example would delete the users table:
Username: ' or 1=1; drop table users; - -
Password: [Anything]
Which could be described as a Threat Vector?
A threat vector is the method (crafted packet) that would be used to exercise a vulnerability (fragmentation to bypass IDS signature). An unpatched web server that is susceptible to XSS simply describes a vulnerability (unpatched) paired with a specific threat (XSS) and does not touch on the method to activate the threat. Similarly, the coding error that allows remote code execution is simply describing the pairing of a vulnerability with a threat, respectively. The botnet is an unspecified threat; there is no indication of how the threat was activated (or it's intention/capabilities; the threat).
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Catherin
23 days agoLigia
24 days agoHoward
1 months agoCaitlin
2 months agoAngelica
2 months agoKris
2 months agoEssie
3 months agoAudry
3 months agoNancey
3 months agoDong
3 months agoYuette
4 months agoDetra
4 months agoTandra
4 months agoLashanda
4 months agoMichel
5 months agoMarylin
5 months agoKeith
5 months agoNana
5 months agoArtie
5 months agoDelbert
6 months agoAsha
6 months agoDulce
6 months agoTamesha
6 months agoEzekiel
6 months agoLeandro
7 months agoAnika
7 months agoArletta
7 months agoCaitlin
7 months agoBecky
7 months agoVan
8 months agoMartha
8 months agoRima
9 months agoMalissa
10 months agoRomana
10 months ago