GIAC Defensible Security Architect - GDSA FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Your company is facing increased phishing attempts through email attachments. The security team has decided to implement an SMTP proxy to improve email security. What are the key benefits of deploying an SMTP proxy, and how should it be configured to block malicious content?
Response:

A. The SMTP proxy will focus on blocking all outbound email traffic to prevent data loss B. The SMTP proxy will filter email attachments and block suspicious content; it should be configured to scan attachments for malware and enforce policies on acceptable attachment types C. The SMTP proxy will prevent users from accessing external websites while they are receiving emails D. The SMTP proxy will encrypt all incoming emails and block any that are not encrypted

Discussion 0

Correct Answer: B Vote an answer

Question 2

Which functions do next-generation firewalls perform?
(Choose two)
Response:

A. Acting solely as a packet filtering device B. Providing application-level inspection C. Implementing user identity tracking in traffic inspection D. Establishing VPN connections

Discussion 0

Correct Answer: B,C Vote an answer

Question 3

Which of the following are common tunneling mechanisms used in IPv6 networks?
(Choose two)
Response:

A. ISATAP B. 6to4 tunneling C. GRE tunneling D. TLS tunneling

Discussion 0

Correct Answer: A,B Vote an answer

Question 4

How do jump boxes contribute to network security?
Response:

A. They increase the network's attack surface. B. They decrease the need for monitoring. C. They provide direct Internet access. D. They offer a single point of access for administrative tasks.

Discussion 0

Correct Answer: D Vote an answer

Question 5

Which of the following are key features of a next-generation firewall (NGFW)?
(Choose two)
Response:

A. Full disk encryption for all network devices B. Deep packet inspection C. IP address filtering only D. Application awareness and control

Discussion 0

Correct Answer: B,D Vote an answer

Question 6

What is a primary concern when securing cloud-based architectures?
Response:

A. Physical security of hardware B. DDoS protection only C. Encryption of data at rest and in transit D. On-premises firewall configuration

Discussion 0

Correct Answer: C Vote an answer

Question 7

What is the primary principle behind Zero Trust Networking?
Response:

A. Trusting any device that passes basic security checks B. Trusting all devices within a specific domain C. Trusting only verified entities and not automatically trusting any user or device D. Trusting all network traffic equally

Discussion 0

Correct Answer: C Vote an answer

Question 8

In the context of Zero Trust, which of the following measures are effective in responding to pivoting adversaries?
(Select all that apply)
Response:

A. Implementing strict network access controls B. Isolating infected systems C. Continuous monitoring of network activities D. Regularly updating firewall rules

Discussion 0

Correct Answer: A,B,C Vote an answer

Question 9

Which of the following is a core component of Zero Trust Architecture?
Response:

A. Credential rotation to reduce the risk of compromised credentials B. Network segmentation using firewalls C. Packet filtering based on port numbers D. Network perimeter security

Discussion 0

Correct Answer: A Vote an answer

Question 10

How does a Web proxy contribute to network security?
Response:

A. By providing a backup connection method B. By allowing all traffic without inspection C. By increasing the data transfer speeds D. By filtering and monitoring internet traffic

Discussion 0

Correct Answer: D Vote an answer

Question 11

Your organization has implemented a Zero Trust Architecture and is now focusing on protecting against insider threats. The security team has identified an employee using elevated privileges to access sensitive data they should not have.
What immediate steps should you take to comply with Zero Trust principles and prevent further unauthorized access?
Response:

A. Revoke the employee's elevated privileges, implement least privilege access, and monitor their activity for any further violations B. Disable multi-factor authentication to simplify monitoring C. Block all user traffic and disable access to the sensitive data for all employees D. Allow the employee continued access while performing a full security audit

Discussion 0

Correct Answer: A Vote an answer

Question 12

Which of the following is a common Layer 3 attack that exploits the routing table?
Response:

A. ARP cache poisoning B. VLAN hopping C. Man-in-the-middle attack D. Route injection attack

Discussion 0

Correct Answer: D Vote an answer

Question 13

Zero Trust security models influence architecture by emphasizing:
Response:

A. Verification regardless of location or asset B. Use of a single security protocol C. Aesthetics and architectural design D. Trust assumptions based on network location

Discussion 0

Correct Answer: A Vote an answer