GEIR by GIAC Actual Free Exam Q&As

Question 1

What role does 'contextual awareness' play in incident response to modern attacks?
Response:

A. It deals exclusively with legal compliance and regulations. B. It involves regular updates to the organization's website to inform stakeholders about the ongoing threats. C. It is about keeping the antivirus systems up to date. D. It refers to understanding the nature of the attack and its impact on business operations.

Discussion 0

Correct Answer: D Vote an answer

Question 2

Which command is used to check the current Linux kernel version?
Response:

A. uname -r B. kernel -v C. linux -version D. checkkernel

Discussion 0

Correct Answer: A Vote an answer

Question 3

Which strategy is MOST effective in managing the complexity of a large-scale digital forensic investigation in a multinational corporation?
Response:

A. Employing distributed teams using standardized procedures and tools B. Centralizing all data to a single location for analysis C. Conducting investigations remotely without onsite forensic capability D. Relying solely on external law enforcement resources

Discussion 0

Correct Answer: A Vote an answer

Question 4

Which of the following is an example of a behavioral indicator in the context of threat hunting and incident response?
Response:

A. An unusually high amount of data being uploaded from a device B. Certificates issued by a non-trusted authority C. Presence of an unauthorized software on the system D. Known malicious IP addresses attempting to communicate with the network

Discussion 0

Correct Answer: A Vote an answer

Question 5

Which technique is considered BEST for identifying data exfiltration during an ongoing incident in a large enterprise?
Response:

A. Monitoring outbound traffic anomalies at the network perimeter B. Routine inventory of physical assets C. Regular audits of user and administrative privileges D. Checking the physical security logs for unauthorized access

Discussion 0

Correct Answer: A Vote an answer

Question 6

How does Platform as a Service (PaaS) support business operations?
Response:

A. By offering personal data storage B. By offering an environment for application development and deployment C. By providing hardware only D. By providing consultancy services on software development

Discussion 0

Correct Answer: B Vote an answer

Question 7

On macOS, what utility is used for managing disks and storage devices?
Response:

A. Disk Manager B. Disk Configurator C. Disk Utility D. Storage Admin

Discussion 0

Correct Answer: C Vote an answer

Question 8

Which features should be prioritized when developing an incident response strategy for macOS systems?
(Choose Two)
Response:

A. Quick isolation of affected systems B. Efficient user notification systems C. Long-term data storage solutions D. Cross-platform compatibility

Discussion 0

Correct Answer: A,D Vote an answer

Question 9

Which file system is predominantly used in macOS High Sierra and later for providing robust encryption and snapshot capabilities?
Response:

A. HFS+ B. NTFS C. APFS D. ext4

Discussion 0

Correct Answer: C Vote an answer

Question 10

How does sandboxing help in the detection of modern attacks?
Response:

A. It manages software updates across the organization. B. It restricts internet access to prevent users from downloading malware. C. It provides a controlled environment to execute and observe suspicious code without risking the main network. D. It helps in creating backups of critical data.

Discussion 0

Correct Answer: C Vote an answer

GIAC Enterprise Incident Response - GEIR Exam Practice Test