GIAC GCED QUESTIONS AND ANSWERS | VERIFIED
AND WELL DETAILED ANSWERS | PLUS RATIONALES
| GUARANTEED PASS | LATEST EXAM UPDATE |
EXAM PREP | STUDY GUIDE | PRACTICE TEST
,Domain 1: Network Defense & Architecture (Q1–25)
Q1. Which layer of the OSI model does a switch primarily operate at?
A) Layer 1
B) Layer 2
C) Layer 3
D) Layer 4
Answer: B
Rationale: Switches forward frames based on MAC addresses, which operate at Layer 2 (Data Link). Layer 3
switches can route, but traditional switching is Layer 2.
Q2. What is the primary purpose of a DMZ?
A) Encrypt internal traffic
B) Segregate public-facing services from the internal network
,C) Replace the firewall
D) Provide VPN access
Answer: B
Rationale: A DMZ (demilitarized zone) isolates externally accessible services so a compromise doesn't directly
expose the internal network.
Q3. Which protocol uses TCP port 443?
A) HTTP
B) HTTPS
C) SSH
D) FTP
Answer: B
Rationale: HTTPS uses TCP 443 by default for encrypted web traffic via TLS.
, Q4. A stateful firewall differs from a stateless firewall because it:
A) Only filters on IP addresses
B) Tracks the state of active connections
C) Cannot perform NAT
D) Operates only at Layer 7
Answer: B
Rationale: Stateful firewalls maintain a connection table, allowing return traffic for established sessions.
Q5. Which is a private IP address range?
A) 8.8.8.0/24
B) 172.16.0.0/12
C) 192.169.0.0/16
D) 224.0.0.0/4
AND WELL DETAILED ANSWERS | PLUS RATIONALES
| GUARANTEED PASS | LATEST EXAM UPDATE |
EXAM PREP | STUDY GUIDE | PRACTICE TEST
,Domain 1: Network Defense & Architecture (Q1–25)
Q1. Which layer of the OSI model does a switch primarily operate at?
A) Layer 1
B) Layer 2
C) Layer 3
D) Layer 4
Answer: B
Rationale: Switches forward frames based on MAC addresses, which operate at Layer 2 (Data Link). Layer 3
switches can route, but traditional switching is Layer 2.
Q2. What is the primary purpose of a DMZ?
A) Encrypt internal traffic
B) Segregate public-facing services from the internal network
,C) Replace the firewall
D) Provide VPN access
Answer: B
Rationale: A DMZ (demilitarized zone) isolates externally accessible services so a compromise doesn't directly
expose the internal network.
Q3. Which protocol uses TCP port 443?
A) HTTP
B) HTTPS
C) SSH
D) FTP
Answer: B
Rationale: HTTPS uses TCP 443 by default for encrypted web traffic via TLS.
, Q4. A stateful firewall differs from a stateless firewall because it:
A) Only filters on IP addresses
B) Tracks the state of active connections
C) Cannot perform NAT
D) Operates only at Layer 7
Answer: B
Rationale: Stateful firewalls maintain a connection table, allowing return traffic for established sessions.
Q5. Which is a private IP address range?
A) 8.8.8.0/24
B) 172.16.0.0/12
C) 192.169.0.0/16
D) 224.0.0.0/4
