Free GIAC GEIR Exam Dumps Questions & Answers

Which of the following is a common attack technique performed against containers?
Response:

• A.  Brute force attacks
• B.  Phishing
• C.  SQL injection
• D.  Privilege escalation

Which outcome is a direct benefit of conducting regular post-incident reviews in an enterprise incident response program?
Response:

• A.  Immediate identification of the attacker
• B.  Direct financial recovery from the incident
• C.  Enhanced preparedness for future incidents through lessons learned
• D.  Increased marketing opportunities

What are effective practices for maintaining enterprise visibility to support incident scoping?
Response:

• A.  Integrating SIEM solutions for real-time analysis
• B.  Regular data purging to free up storage space
• C.  Continuous monitoring of network traffic
• D.  Periodic manual audits of security settings

Which of the following is an example of a behavioral indicator in the context of threat hunting and incident response?
Response:

• A.  Presence of an unauthorized software on the system
• B.  Known malicious IP addresses attempting to communicate with the network
• C.  An unusually high amount of data being uploaded from a device
• D.  Certificates issued by a non-trusted authority

Which Linux directory contains the configuration files for most software packages?
Response:

• A.  /usr
• B.  /dev
• C.  /etc
• D.  /bin