Free GEIR Questions for GIAC Enterprise Incident Response GEIR Exam as PDF & Practice Test Engine
Select the tool that is most appropriate for analyzing network traffic to detect potential intrusions in real-time.
Response:
Response:
Correct Answer: D
Vote an answer
Which of the following best represents a use case for applying threat intelligence in detecting modern attacks?
Response:
Response:
Correct Answer: C
Vote an answer
What types of data sources are instrumental in scoping malware spread within an enterprise network?
Response:
Response:
Correct Answer: B,D
Vote an answer
In an enterprise environment, what is the primary purpose of implementing a Security Information and Event Management (SIEM) system during incident response?
Response:
Response:
Correct Answer: B
Vote an answer
Select the strategies that are effective for aggregating telemetry data in a large enterprise.
Response:
Response:
Correct Answer: B,C,D
Vote an answer
What is the purpose of "container orchestration" in an enterprise environment?
Response:
Response:
Correct Answer: B
Vote an answer
Which of the following telemetry sources are critical for scoping incidents related to unauthorized data access?
Response:
Response:
Correct Answer: A,B,C
Vote an answer
Which of the following is an example of a behavioral indicator in the context of threat hunting and incident response?
Response:
Response:
Correct Answer: A
Vote an answer
What capabilities should a tool have to effectively collect and process incident response data at scale across macOS endpoints?
(Choose Three)
Response:
(Choose Three)
Response:
Correct Answer: A,B,E
Vote an answer
0
0
0
10