GCED Practice Test practice questions, page 3 of 4, with answer review and explanations.
Question 11
Which command tool can be used to change the read-only or hidden setting of the file in the screenshot?
attrib
type
tasklist
dir
Question 12
Which Unix administration tool is designed to monitor configuration changes to Cisco, Extreme and Foundry infrastructure devices?
SNMP
Netflow
RANCID
RMON
Question 13
If a Cisco router is configured with the "service config" configuration statement, which of the following tools could be used by an attacker to apply a new router configuration?
TFTPD
Hydra
Ettercap
Yersinia
Question 14
Who is ultimately responsible for approving methods and controls that will reduce any potential risk to an organization?
Senior Management
Data Owner
Data Custodian
Security Auditor
Question 15
An internal host at IP address 10.10.50.100 is suspected to be communicating with a command and control whenever a user launches browser window. What features and settings of Wireshark should be used to isolate and analyze this network traffic?
Filter traffic using ip.src = = 10.10.50.100 and tcp.srcport = = 80, and use Expert Info
Filter traffic using ip.src = = 10.10.50.100 and tcp.dstport = = 53, and use Expert Info
Filter traffic using ip.src = = 10.10.50.100 and tcp.dstport = = 80, and use Follow TCP stream
Filter traffic using ip.src = = 10.10.50.100, and use Follow TCP stream