GIAC Enterprise Incident Response 認定 GEIR 試験問題:

1. When responding to a cloud incident, what is the primary purpose of using automated techniques?
Response:

A) To replace human analysts completely
B) To increase the size of the dataset
C) To slow down the response process
D) To quickly identify and mitigate threats

2. Which of the following is a common cloud attack scenario that involves exploiting a misconfiguration in storage permissions?
Response:

A) Man-in-the-Middle Attack
B) SQL Injection
C) Data Exposure
D) Cross-Site Scripting (XSS)

3. What is the role of the fs_usage command in macOS?
Response:

A) It repairs corrupted files.
B) It monitors all file system activity in real-time.
C) It increases storage space efficiency.
D) It formats new storage devices.

4. Which command is used to check the current Linux kernel version?
Response:

A) linux -version
B) kernel -v
C) uname -r
D) checkkernel

5. Which of the following best describes the concept of 'proactive threat hunting'?
Response:

A) Investigating known security breaches to ensure full remediation
B) Scanning the network for vulnerabilities after an attack
C) Updating antivirus signatures based on recent malware discoveries
D) Actively searching for malicious activities that may evade traditional detection

質問と回答：