GIAC Defensible Security Architect 認定 GDSA 試験問題:

1. What is the primary purpose of a dual-stack system in IPv6 deployment?
Response:

A) To double the network speed by utilizing both IPv4 and IPv6
B) To support both IPv4 and IPv6 traffic simultaneously
C) To provide redundancy in case one of the stacks fails
D) To transition all network traffic from IPv4 to IPv6 immediately

2. How does a host-based Intrusion Detection System/Intrusion Prevention System (IDS/IPS) contribute to the security of Zero Trust Endpoints?
Response:

A) By monitoring and analyzing system activities for signs of malicious actions
B) By generating excessive logs to deter attackers
C) By serving as the primary firewall at the network perimeter
D) By encrypting data at rest and in transit

3. What does micro-segmentation in network security aim to achieve?
(Choose two)
Response:

A) Reduce the attack surface within the network
B) Increase network traffic
C) Strengthen internal security controls
D) Simplify network management

4. Which security mechanisms are used to mitigate VLAN hopping attacks?
(Choose two)
Response:

A) Enforcing VLAN tagging
B) Allowing trunk ports on all switches
C) Using ARP poisoning detection tools
D) Disabling unused ports and configuring them as access ports

5. Which of the following best describes the purpose of IPv6 tunneling?
Response:

A) To increase the latency and packet overhead in the network
B) To encapsulate IPv6 packets within IPv4 packets for transport over IPv4 networks
C) To provide additional encryption and security to IPv6 packets
D) To replace all IPv4 traffic with IPv6 traffic without requiring any network changes

質問と回答：