[Jan 28, 2022] Dumps Collection GCCC Test Engine Dumps Training With 95 Questions
GIAC GCCC Dumps - 100% Cover Real Exam Questions
NEW QUESTION 18
Which of the following CIS Controls is used to manage the security lifecycle by validating that the documented controls are in place?
- A. Controlled Use of Administrative Privilege
- B. Data Protection
- C. Account Monitoring and Control
- D. Penetration Tests and Red Team Exercises
Answer: D
NEW QUESTION 19
Which of the following assigns a number indicating the severity of a discovered software vulnerability?
- A. CVE
- B. CPE
- C. CVSS
- D. CCE
Answer: C
NEW QUESTION 20
Which of the following is a requirement in order to implement the principle of least privilege?
- A. Mandatory Access Control (MAC)
- B. Data normalization
- C. Discretionary Access Control (DAC)
- D. Data classification
Answer: D
NEW QUESTION 21
Which of the following will decrease the likelihood of eavesdropping on a wireless network?
- A. Using EAP/TLS authentication and WPA2 with AES encryption
- B. Broadcasting in the 5Ghz frequency
- C. Using Wired Equivalent Protocol (WEP)
- D. Putting the wireless network on a separate VLAN
Answer: A
NEW QUESTION 22
An organization is implementing a control for the Limitation and Control of Network Ports, Protocols, and Services CIS Control. Which action should they take when they discover that an application running on a web server is no longer needed?
- A. Block the protocol for the unneeded service at the firewall
- B. Uninstall the application providing the service
- C. Turn the service off in the host configuration files
- D. Create an access list on the router to filter traffic to the host
Answer: B
NEW QUESTION 23
During a security audit which test should result in a source packet failing to reach its intended destination?
- A. A new connection request from the internet is sent to the company's DNS server
- B. A packet originating from the company's DMZ is sent to a host on the company's internal network
- C. A new connection request from the Internet is sent to a host on the company 's internal net work
- D. A packet originating from the company's internal network is sent to the company's DNS server
Answer: C
NEW QUESTION 24
What is the relationship between a service and its associated port?
- A. A service relies on the port to select the protocol
- B. A service opens the port and listens for network traffic
- C. A service sets limits on the volume of traffic sent through the port
- D. A service closes a port after a period of inactivity
Answer: B
NEW QUESTION 25
An organization has created a policy that allows software from an approved list of applications to be installed on workstations. Programs not on the list should not be installed. How can the organization best monitor compliance with the policy?
- A. Creating an IDS signature to alert based on unknown "User-Agent " strings
- B. Performing regular port scans of workstations on the network
- C. Comparing system snapshots and alerting when changes are made
- D. Auditing Active Directory and alerting when new accounts are created
Answer: A
NEW QUESTION 26
Which of the following is used to prevent spoofing of e-mail addresses?
- A. Sender Policy Framework
- B. Simple Mail Transfer Protocol
- C. Public-Key Cryptography
- D. DNS Security Extensions
Answer: A
NEW QUESTION 27
How does an organization's hardware inventory support the control for secure configurations?
- A. It provides a list of managed devices that should be secured
- B. It provides a list of unauthorized devices on the network
- C. It identifies the life cycle of manufacturer support for hardware devices
- D. It provides the MAC addresses for insecure network adapters
Answer: A
NEW QUESTION 28
An organization is implementing a control within the Application Software Security CIS Control. How can they best protect against injection attacks against their custom web application and database applications?
- A. Configure the web server to use Unicode characters only
- B. Filter input to only allow safe characters and strings
- C. Ensure the web application server logs are going to a central log host
- D. Check user input against a list of reserved database terms
Answer: B
NEW QUESTION 29
As part of an effort to implement a control on E-mail and Web Protections, an organization is monitoring their webserver traffic. Which event should they receive an alert on?
- A. The number of website hits is higher that the daily average
- B. The website issues a RST to a client after the connection is idle
- C. The website does not respond to a SYN packet for 30 minutes
- D. The logfiles of the webserver are rotated and archived
Answer: C
NEW QUESTION 30
Acme Corporation performed an investigation of its centralized logging capabilities. It found that the central server is missing several types of logs from three servers in Acme's inventory. Given these findings, what is the most appropriate next step?
- A. Perform analysis to identify the source of the logging problems
- B. Restart or reinstall the logging service on each of the problem servers
- C. Document the missing logs in the core evaluation report as a minor issue
- D. Define processes to manually review logs for the problem servers
Answer: A
NEW QUESTION 31
Beta corporation is doing a core evaluation of its centralized logging capabilities. The security staff suspects that the central server has several log files over the past few weeks that have had their contents changed. Given this concern, and the need to keep archived logs for log correction applications, what is the most appropriate next steps?
- A. Keep the files in the log archives synchronized with another location.
- B. Install a tier one timeserver on the network to keep log devices synchronized.
- C. Store the files read-only and keep hashes of the logs separately.
- D. Encrypt the log files with an asymmetric key and remove the cleartext version.
Answer: C
NEW QUESTION 32
Based on the data shown below.
Which wireless access point has the manufacturer default settings still in place?
- A. Interwebz
- B. Linksys
- C. Starbucks
- D. Hhonors
Answer: B
NEW QUESTION 33
A security incident investigation identified the following modified version of a legitimate system file on a compromised client:
C:\Windows\System32\winxml.dll Addition Jan. 16, 2014 4:53:11 PM
The infection vector was determined to be a vulnerable browser plug-in installed by the user. Which of the organization's CIS Controls failed?
- A. Application Software Security
- B. Maintenance, Monitoring, and Analysis of Audit Logs
- C. Inventory and Control of Software Assets
- D. Inventory and Control of Hardware Assets
Answer: C
NEW QUESTION 34
Dragonfly Industries requires firewall rules to go through a change management system before they are configured. Review the change management log. Which of the following lines in your firewall ruleset has expired and should be removed from the configuration?
- A. access-list inbound permit tcp host 8.8.207.97 host 10.10.12.100 eq ssh
- B. access-list outbound permit tcp host 10.1.1.7 any eq smtp
- C. access-list inbound permit tcp 8.8.0.0 0.0.0.255 10.10.12.252 eq 8080
- D. access-list outbound deny tcp any host 74.125.228.2 eq www
Answer: A
NEW QUESTION 35
A breach was discovered after several customers reported fraudulent charges on their accounts. The attacker had exported customer logins and cracked passwords that were hashed but not salted. Customers were made to reset their passwords.
Shortly after the systems were cleaned and restored to service, it was discovered that a compromised system administrator's account was being used to give the attacker continued access to the network. Which CIS Control failed in the continued access to the network?
- A. Maintenance, Monitoring, and Analysis of Audit Logs
- B. Controlled Use of Administrative Privilege
- C. Incident Response and Management
- D. Account Monitoring and Control
Answer: C
NEW QUESTION 36
......
GIAC GCCC Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 11 |
|
Realistic PrepAwayETE GCCC Dumps PDF - 100% Passing Guarantee: https://www.prepawayete.com/GIAC/GCCC-practice-exam-dumps.html