Get Instant Access of 100% REAL GCCC DUMP Pass Your Exam Easily
GCCC Free Exam Questions with Quality Guaranteed
The GCCC exam is administered by the Global Information Assurance Certification (GIAC), a well-respected organization in the cybersecurity industry. GCCC exam is designed for professionals who have experience in cybersecurity and are looking to further their knowledge and skills in critical control implementation and management. GCCC exam covers a wide range of topics related to cybersecurity, including network security, application security, and data protection.
NEW QUESTION # 50
Janice is auditing the perimeter of the network at Sugar Water InC. According to documentation, external SMTP traffic is only allowed to and from 10.10.10.25. Which of the following actions would demonstrate the rules are configured incorrectly?
- A. Receive mail at Sugar Water Inc. account using Outlook as a mail client
- B. Successfully deliver mail from web client using another host inside the network to an external contact.
- C. Receive spam from a known bad domain
- D. Successfully deliver mail from another host inside the network directly to an external contact
Answer: D
NEW QUESTION # 51
Below is a screenshot from a deployed next-generation firewall. These configuration settings would be a defensive measure for which CIS Control?
- A. Email and Web Browser Protections
- B. Limitation and Control of Network Ports, Protocols and Services
- C. Secure Configuration for Network Devices, such as Firewalls, Routers and Switches.
- D. Controlled Access Based on the Need to Know
Answer: A
NEW QUESTION # 52
Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?
- A. The loghost is receiving out-of-sync logs from undocumented servers
- B. The loghost time is out-of-sync with an external host
- C. The loghost is missing logs from 3 servers in the inventory
- D. The loghost is receiving logs from hosts with different timezone values
Answer: A
NEW QUESTION # 53
What is the list displaying?
- A. Missing patches from a patching server
- B. Installed software on an end-user device
- C. Allowed program in a software inventory application
- D. Unauthorized programs detected in a software inventory
Answer: C
NEW QUESTION # 54
An organization wants to test its procedure for data recovery. Which of the following will be most effective?
- A. Verifying that backup process is running when it should
- B. Verifying that network backups can't be read in transit
- C. Verifying there are no errors in the backup server logs
- D. Verifying a file can be recovered from backup media
Answer: D
NEW QUESTION # 55
An organization has implemented a control for penetration testing and red team exercises conducted on their network. They have compiled metrics showing the success of the penetration testing (Penetration Tests), as well as the number of actual adversary attacks they have sustained (External Attacks). Assess the metrics below and determine the appropriate interpretation with respect to this control.
- A. The red team is improving their capability to measure network security
- B. There are too many internal penetration tests being conducted
- C. The methods the red team is using are not effectively testing the network
- D. The blue team is adequately protecting the network
Answer: C
NEW QUESTION # 56
Implementing which of the following will decrease spoofed e-mail messages?
- A. Sender Policy Framework
- B. Network Address Translation
- C. Finger Protocol
- D. Internet Message Access Protocol
Answer: A
NEW QUESTION # 57
As part of a scheduled network discovery scan, what function should the automated scanning tool perform?
- A. Uninstall listening services that have not been used since the last scheduled scan
- B. Alert the incident response team on ports and services added since the last scan
- C. Automatically close ports and services not included in the current baseline
- D. Compare discovered ports and services to a known baseline to report deviations
Answer: D
NEW QUESTION # 58
DHCP logging output in the screenshot would be used for which of the following?
- A. Detecting malicious activity by compromised or unauthorized devices on the network.
- B. Enforcing port-based network access control to prevent unauthorized devices on the network.
- C. Identifying new connections to maintain an up-to-date inventory of devices on the network.
- D. Providing ping sweep results to identify live network hosts for vulnerability scanning.
Answer: C
NEW QUESTION # 59
How often should the security awareness program be communicated to employees?
- A. At orientation and review times
- B. Continuously
- C. Monthly
- D. Annually
Answer: B
NEW QUESTION # 60
Which of the following items would be used reactively for incident response?
- A. A phone tree used to contact necessary personnel
- B. A schedule for creating and storing backup
- C. An IPS rule that prevents web access from international locations
- D. A script used to verify patches are installed on systems
Answer: A
NEW QUESTION # 61
Acme Corporation performed an investigation of its centralized logging capabilities. It found that the central server is missing several types of logs from three servers in Acme's inventory. Given these findings, what is the most appropriate next step?
- A. Define processes to manually review logs for the problem servers
- B. Document the missing logs in the core evaluation report as a minor issue
- C. Perform analysis to identify the source of the logging problems
- D. Restart or reinstall the logging service on each of the problem servers
Answer: C
NEW QUESTION # 62
A global corporation has major data centers in Seattle, New York, London and Tokyo. Which of the following is the correct approach from an intrusion detection and event correlation perspective?
- A. Synchronize between Seattle and New York, and use local time for London and Tokyo
- B. Configure all data center systems to use GMT time
- C. Configure all data center systems to use local time
- D. Configure all systems to use their default time settings
Answer: C
NEW QUESTION # 63
Which of the following archiving methods would maximize log integrity?
- A. Magnetic Tape
- B. USB flash drive
- C. CD-RW
- D. DVD-R
Answer: D
NEW QUESTION # 64
An organization is implementing a control within the Application Software Security CIS Control. How can they best protect against injection attacks against their custom web application and database applications?
- A. Ensure the web application server logs are going to a central log host
- B. Check user input against a list of reserved database terms
- C. Filter input to only allow safe characters and strings
- D. Configure the web server to use Unicode characters only
Answer: C
NEW QUESTION # 65
Which type of scan is best able to determine if user workstations are missing any important patches?
- A. A vulnerability scan using valid credentials
- B. A network vulnerability scan using aggressive scanning
- C. A source code scan
- D. A web application/database scan
- E. A port scan using banner grabbing
Answer: A
NEW QUESTION # 66
Kenya is a system administrator for SANS. Per the recommendations of the CIS Controls she has a dedicated host (kenya- adminbox / 10.10.10.10) for any administrative tasks. She logs into the dedicated host with her domain admin credentials. Which of the following connections should not exist from kenya-adminbox?
- A. Mail.jane.org.25
- B. Firewall_charon.jane.org.22
- C. 10.10.245.3389
- D. 10.10.10.33.443
Answer: A
NEW QUESTION # 67
An administrator looking at a web application's log file found login attempts by the same host over several seconds. Each user ID was attempted with three different passwords. The event took place over 5 seconds.
* ROOT
* TEST
* ADMIN
* SQL
* USER
* NAGIOSGUEST
What is the most likely source of this event?
- A. An IT administrator attempting to use outdated credentials to enter the site
- B. An attempted Denial of Service attack by locking out administrative accounts
- C. An attempt to use SQL Injection to gain information from a web-connected database
- D. An automated tool that attempts to use a dictionary attack to infiltrate a website
Answer: D
NEW QUESTION # 68
Review the below results of an audit on a server. Based on these results, which document would you recommend be reviewed for training or updates?
- A. Procedure for adjusting network share permissions
- B. Procedure for setting and resetting user passwords
- C. Procedure for modifying file permissions
- D. Procedure for authorizing remote server access
Answer: B
NEW QUESTION # 69
......
The GCCC certification is valuable for professionals who work in various roles, including security analysts, security engineers, security architects, IT managers, and compliance officers. GIAC Critical Controls Certification (GCCC) certification can help professionals demonstrate their proficiency in critical security controls and show that they have the necessary skills to protect their organization's assets from cyber threats. Additionally, the GCCC certification is recognized globally, making it a valuable credential for professionals who work in multinational organizations.
GCCC Free Exam Files Downloaded Instantly: https://www.testpassking.com/GCCC-exam-testking-pass.html
Practice Exams and Training Solutions for Certifications: https://drive.google.com/open?id=1UNJkPlKO4Wg37wZeLSJSr6myw_SJtTmT