GIAC GDSA Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Fundamental Layer 3 Defense | 15% | - Securing SNMP, NTP and other core services - Bogon filtering and route authentication - IPv6 security considerations and controls - CIDR, routing protocols and attack mitigation |
| Layer 1 / Layer 2 Defense | 10% | - Switching infrastructure security - ARP spoofing and broadcast control - VLAN segmentation and protection |
| Fundamental Security Architecture Concepts | 20% | - Software Defined Networking (SDN) security - Intrusion Kill Chain and Diamond Model application - Zero Trust Model principles and implementation - Security architecture frameworks and risk assessment |
| Data-Centric Security | 20% | - Reverse proxies and WAF implementation - Tokenization and data masking - Encryption strategies and key management - Database activity monitoring and protection |
| Cloud-based Security Architecture | 20% | - Cloud network segmentation and micro-segmentation - Hypervisor and container security - Cloud service models and shared responsibility - Cloud access control and identity management |
| Data Discovery, Governance, and Mobility Management | 15% | - Data Loss Prevention (DLP) design and deployment - Data classification and inventory - Mobile Device Management (MDM) and endpoint security - Data lifecycle protection and compliance |
GIAC Defensible Security Architect Sample Questions:
Question #1
ARP cache poisoning can lead to which of the following?
Response:
A. Man-in-the-middle attacks by redirecting or interrupting network traffic
B. Improved network efficiency by caching frequently accessed addresses
C. Enhanced network security by verifying ARP responses
D. An increase in the ARP table size
Question #2
Which of the following techniques focuses on restricting network communication to verified entities only?
Response:
A. Domain Isolation
B. Transport Layer Security (TLS)
C. Red herring defenses
D. Single Packet Authentication
Question #3
Which defenses can help mitigate the risk of Distributed Denial of Service (DDoS) attacks?
(Choose two)
Response:
A. Deploying a Web Application Firewall (WAF)
B. Using rate-limiting to control incoming traffic
C. Isolating internal networks using VLANs
D. Implementing Network Address Translation (NAT)
Question #4
Which of the following are effective strategies for securing SNMP traffic at Layer 3?
(Choose two)
Response:
A. Using SNMPv1 for better compatibility
B. Allowing SNMP traffic from any IP address for easier management
C. Disabling SNMP on all unused devices
D. Configuring SNMP with strong authentication (e.g., SNMPv3)
Question #5
What is data discovery in the context of data governance?
Response:
A. Removing all data from the network
B. Identifying and classifying data stored in various locations within an organization
C. Migrating all company data to the cloud
D. Ignoring data privacy regulations
Solutions:
| Question #1 Correct Answer: A | Question #2 Correct Answer: A | Question #3 Correct Answer: A,B | Question #4 Correct Answer: C,D | Question #5 Correct Answer: B |
1117 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
