GIAC Certified Incident Handler

One type of FTP scan allows you to find a weakness in a certain type of firewall. These firewalls will allow an FTP data connection to take place, even though t...

Regardless of the initial compromise or type of incident, which step is always a good practice during the Recovery phase of the Incident Handling Process?

You are a member of your organization's IT security team. Your team has limited resources, so investigating every suspicious event is impossible. Which one of t...

You are responding to an incident in which the organization's Extranet server has been compromised. The Extranet is the browser home page for most users in the...

To defend against network mapping, which of the following packets should be denied at the border router?