GIAC GCED Exam Questions

Question 6 of 56

Why might an administrator not be able to delete a file using the Windows del command without specifying additional command line switches?

Because it has the read-only attribute set

Because it is encrypted

Because it has the nodel attribute set

Because it is an executable file

Correct Answer: A

Question 7 of 56

Why would the pass action be used in a Snort configuration file?

The pass action simplifies some filtering by specifying what to ignore.

The pass action passes the packet onto further rules for immediate analysis.

The pass action serves as a placeholder in the snort configuration file for future rule updates.

Using the pass action allows a packet to be passed to an external process.

The pass action increases the number of false positives, better testing the rules.

Correct Answer: A

Question 8 of 56

On which layer of the OSI Reference Model does the FWSnort utility function?

Physical Layer

Data Link Layer

Transport Layer

Session Layer

Application Layer

Correct Answer: C

Question 9 of 56

Which command tool can be used to change the read-only or hidden setting of the file in the screenshot?
Exam GCED: Question 9 - Image 1

attrib

type

tasklist

dir

Correct Answer: A

Question 10 of 56

Which Unix administration tool is designed to monitor configuration changes to Cisco, Extreme and Foundry infrastructure devices?

SNMP

Netflow

RANCID

RMON

Correct Answer: C