GDAT by GIAC Actual Free Exam Q&As

Question 1

The tool commonly used for automated penetration testing that simulates an attack from the attacker's perspective is called _________.
Response:

A. Wireshark B. Snort C. Metasploit D. Nessus

Discussion 0

Correct Answer: C Vote an answer

Question 2

What is the primary risk associated with excessive administrative privileges in an Active Directory environment?
Response:

A. Reduced system performance B. Increased user confusion and support tickets C. Inefficient system administration D. Increased risk of insider threats and data breaches

Discussion 0

Correct Answer: D Vote an answer

Question 3

What is a primary method used in the reconnaissance phase of a cyber attack?
Response:

A. Social engineering B. Phishing attacks C. Distributed denial-of-service (DDoS) D. Ransomware deployment

Discussion 0

Correct Answer: A Vote an answer

Question 4

Which operating system features can be exploited by attackers to execute malicious payloads?
(Choose two)
Response:

A. AutoRun and AutoPlay features B. Secure Boot C. Secure Shell (SSH) protocols D. Command-line interfaces

Discussion 0

Correct Answer: A,D Vote an answer

Question 5

Regarding Kerberos authentication, which of the following steps are involved in the process of obtaining a service ticket?
Response:

A. The client requests an authentication ticket (TGT) from the Key Distribution Center (KDC). B. The client presents the TGT to the Ticket Granting Server (TGS) to request a service ticket. C. The Ticket Granting Server (TGS) issues a service ticket after validating the TGT. D. The client uses the service ticket to authenticate directly to the Active Directory database.

Discussion 0

Correct Answer: B,C Vote an answer

Question 6

How does implementing least privilege help mitigate security risks?
Response:

A. It increases the transparency of user actions. B. It limits the impact of a compromised account. C. It reduces the need for regular security audits. D. It facilitates faster user onboarding.

Discussion 0

Correct Answer: A,B Vote an answer

Question 7

Which techniques should be applied to secure applications during the design phase of the software development lifecycle?
Response:

A. Implementing role-based access control B. Conducting security audits C. Using encryption for data protection D. Integrating security requirements with functional requirements

Discussion 0

Correct Answer: A,C,D Vote an answer

Question 8

Which of the following is a primary goal of the reconnaissance phase of a cyber attack?
Response:

A. To establish persistence on the target system B. To encrypt the target's data C. To deny the target access to its network resources D. To gather as much information as possible about the target's infrastructure

Discussion 0

Correct Answer: D Vote an answer

GIAC Defending Advanced Threats - GDAT Exam Practice Test