GIAC Defensible Security Architect 認定 GDSA 試験問題:

1. Which of the following are considered best practices for secure remote access?
Response:

A) Regularly updating access policies
B) Allowing unlimited access attempts
C) Enforcing strong authentication mechanisms
D) Using outdated encryption standards

2. In scaling endpoint log collection for Zero Trust Endpoints, what is a key consideration to ensure effectiveness and efficiency?
Response:

A) Ensuring logs are only stored for 24 hours to reduce data storage requirements
B) Collecting as much data as possible, regardless of its relevance
C) Completely automating the response to every log alert to speed up incident response
D) Prioritizing log data that is most relevant to security and organizing it for rapid analysis

3. ARP cache poisoning can lead to which of the following?
Response:

A) Enhanced network security by verifying ARP responses
B) An increase in the ARP table size
C) Man-in-the-middle attacks by redirecting or interrupting network traffic
D) Improved network efficiency by caching frequently accessed addresses

4. Your organization is implementing Zero Trust Networking. During an internal audit, your team identifies a critical flaw in how endpoint traffic is authenticated before accessing sensitive resources. Several devices have bypassed authentication and are communicating with internal systems.
What immediate actions should you take to align with the Zero Trust Networking model and secure the network?
Response:

A) Allow unauthenticated devices to access non-critical systems while reviewing network configurations
B) Disable all network traffic until a full security audit is completed
C) Restrict all external traffic and allow internal traffic to continue without further verification
D) Implement Single Packet Authentication (SPA) for all devices and enforce endpoint traffic encryption

5. Zero Trust security models influence architecture by emphasizing:
Response:

A) Use of a single security protocol
B) Verification regardless of location or asset
C) Trust assumptions based on network location
D) Aesthetics and architectural design

質問と回答：