Check the Available GCCC Exam Dumps with 95 QA's UPDATED 2024
Download GCCC Exam Dumps Questions to get 100% Success in GIAC
NEW QUESTION # 33
Which of the following actions will assist an organization specifically with implementing web application software security?
- A. Providing end-user security training to both internal staff and vendors
- B. Establishing network activity baselines among public-facing servers
- C. Making sure that all hosts are patched during regularly scheduled maintenance
- D. Having a plan to scan vulnerabilities of an application prior to deployment
Answer: D
NEW QUESTION # 34
Which of the options below will do the most to reduce an organization's attack surface on the internet?
- A. Ensure only necessary services are running on Internet-facing hosts, and that they are hardened according to best practices
- B. Deploy an access control list on the perimeter router and limit inbound ICMP messages to echo requests only
- C. Ensure that rotation of duties is used with employees in order to compartmentalize the most important tasks
- D. Deploy antivirus software on internet-facing hosts, and ensure that the signatures are updated regularly
Answer: A
NEW QUESTION # 35
Which of the following actions would best mitigate against phishing attempts such as the example below?
- A. Making web filters to prevent accessing Google Docs
- B. Having employee's complete user awareness training
- C. Establishing email filters to block no-reply address emails
- D. Recommending against the use of Google Docs
Answer: B
NEW QUESTION # 36
What is the relationship between a service and its associated port?
- A. A service closes a port after a period of inactivity
- B. A service opens the port and listens for network traffic
- C. A service relies on the port to select the protocol
- D. A service sets limits on the volume of traffic sent through the port
Answer: B
NEW QUESTION # 37
Below is a screenshot from a deployed next-generation firewall. These configuration settings would be a defensive measure for which CIS Control?
- A. Email and Web Browser Protections
- B. Secure Configuration for Network Devices, such as Firewalls, Routers and Switches.
- C. Controlled Access Based on the Need to Know
- D. Limitation and Control of Network Ports, Protocols and Services
Answer: A
NEW QUESTION # 38
Which approach is recommended by the CIS Controls for performing penetration tests?
- A. Utilize a single attack vector at a time
- B. Document a single vulnerability per system
- C. Complete intrusive tests on test systems
- D. Execute all tests during network maintenance windows
Answer: C
NEW QUESTION # 39
What documentation should be gathered and reviewed for evaluating an Incident Response program?
- A. Results from security training assessments
- B. Staff member interviews
- C. Policy and Procedures
- D. NIST Cybersecurity Framework
Answer: C
NEW QUESTION # 40
Which of the following is necessary to automate a control for Inventory and Control of Hardware Assets?
- A. A centralized time server
- B. An inventory of unauthorized assets
- C. An up-to-date hardening guide
- D. A method of device scanning
Answer: D
NEW QUESTION # 41
What type of Unified Modelling Language (UML) diagram is used to show dependencies between logical groupings in a system?
- A. Deployment diagram
- B. Use case diagram
- C. Class diagram
- D. Package diagram
Answer: D
NEW QUESTION # 42
According to attack lifecycle models, what is the attacker's first step in compromising an organization?
- A. Exploitation
- B. Reconnaissance
- C. Privilege Escalation
- D. Initial Compromise
Answer: B
NEW QUESTION # 43
After installing a software package on several workstations, an administrator discovered the software opened network port TCP 23456 on each workstation. The port is part of a software management function that is not needed on corporate workstations. Which actions would best protect the computers with the software package installed?
- A. Block TCP 23456 at the network perimeter firewall
- B. Redirect traffic to and from the software management port to a non-default port
- C. Determine which service controls the software management function and opens the port, and disable it
- D. Document the port number and request approval from a change control group
Answer: C
NEW QUESTION # 44
A breach was discovered after several customers reported fraudulent charges on their accounts. The attacker had exported customer logins and cracked passwords that were hashed but not salted. Customers were made to reset their passwords.
Shortly after the systems were cleaned and restored to service, it was discovered that a compromised system administrator's account was being used to give the attacker continued access to the network. Which CIS Control failed in the continued access to the network?
- A. Account Monitoring and Control
- B. Controlled Use of Administrative Privilege
- C. Maintenance, Monitoring, and Analysis of Audit Logs
- D. Incident Response and Management
Answer: D
NEW QUESTION # 45
Which of the following is necessary for implementing and automating the Continuous Vulnerability Assessment and Remediation CIS Control?
- A. System Configuration Enforcement System
- B. Software Whitelisting System
- C. Penetration Testing System
- D. Patch Management System
Answer: D
NEW QUESTION # 46
Which of the following actions produced the output seen below?
- A. An access rule was removed from firewallrules2.txt
- B. An access rule was added to firewallrules.txt
- C. An access rule was added to firewallrules2.txt
- D. An access rule was removed from firewallrules.txt
Answer: C
NEW QUESTION # 47
Which of the following statements is appropriate in an incident response report?
- A. The attacker may have been able to access the systems due to missing KB2965111
- B. There had been a storm on September 27th that may have caused a power surge
- C. The backup process may have failed at 2345 due to lack of available bandwidth
- D. The registry entry was modified on September 29th at 22:37
Answer: D
NEW QUESTION # 48
The settings in the screenshot would be configured as part of which CIS Control?
- A. Account Monitoring and Control
- B. Application Software Security
- C. Controlled Use of Administrative Privileges
- D. Inventory and Control of Hardware Assets
Answer: D
NEW QUESTION # 49
Which of the following assigns a number indicating the severity of a discovered software vulnerability?
- A. CCE
- B. CVSS
- C. CPE
- D. CVE
Answer: B
NEW QUESTION # 50
How can the results of automated network configuration scans be used to improve the security of the network?
- A. Results can be provided to network engineers as actionable feedback
- B. Results can be included in audit evidence failures
- C. Reports can be sent to the CIO for performance benchmarks
- D. Scanners can correct network configurations issues
Answer: A
NEW QUESTION # 51
IDS alerts at Service Industries are received by email. A typical day process over 300 emails with fewer than
50 requiring action. A recent attack was successful and went unnoticed due to the number of generated alerts.
What should be done to prevent this from recurring?
- A. Increase the number of staff responsible for processing IDS alerts.
- B. Configure the IDS alerts to only alert on high priority systems.
- C. Tune the IDS rules to decrease false positives.
- D. Change the alert method from email to text message.
Answer: C
NEW QUESTION # 52
Dragonfly Industries requires firewall rules to go through a change management system before they are configured. Review the change management log. Which of the following lines in your firewall ruleset has expired and should be removed from the configuration?
- A. access-list outbound permit tcp host 10.1.1.7 any eq smtp
- B. access-list outbound deny tcp any host 74.125.228.2 eq www
- C. access-list inbound permit tcp 8.8.0.0 0.0.0.255 10.10.12.252 eq 8080
- D. access-list inbound permit tcp host 8.8.207.97 host 10.10.12.100 eq ssh
Answer: D
NEW QUESTION # 53
What is the business goal of the Inventory and Control of Software Assets Control?
- A. Accurate software versions are captured to enable patching
- B. Only authorized software should be installed on the agency 's c omput er s ys t ems
- C. Accurate software versions and counts are documented for licensing updates
- D. All software conforms to licensing requirements for the business
Answer: B
NEW QUESTION # 54
......
Best Value Available! 2024 Realistic Verified Free GCCC Exam Questions: https://www.dumpstillvalid.com/GCCC-prep4sure-review.html
