Jan 01, 2024 Step by Step Guide to Prepare for GCCC Exam BrainDumps
Cyber Security GCCC Real Exam Questions and Answers FREE Updated on 2024
The GIAC Critical Controls Certification (GCCC) certification is valid for four years, and professionals must renew their certification by retaking the exam or earning continuing education credits. GIAC Critical Controls Certification (GCCC) certification is recognized globally and is highly respected by employers in the cybersecurity industry. GIAC Critical Controls Certification (GCCC) certification demonstrates the individual's expertise in implementing and managing critical security controls, making them valuable assets to organizations.
NEW QUESTION # 19
Which of the following will decrease the likelihood of eavesdropping on a wireless network?
- A. Using EAP/TLS authentication and WPA2 with AES encryption
- B. Broadcasting in the 5Ghz frequency
- C. Using Wired Equivalent Protocol (WEP)
- D. Putting the wireless network on a separate VLAN
Answer: A
NEW QUESTION # 20
Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?
- A. The loghost is missing logs from 3 servers in the inventory
- B. The loghost is receiving out-of-sync logs from undocumented servers
- C. The loghost is receiving logs from hosts with different timezone values
- D. The loghost time is out-of-sync with an external host
Answer: B
NEW QUESTION # 21
Based on the data shown below.
Which wireless access point has the manufacturer default settings still in place?
- A. Starbucks
- B. Hhonors
- C. Interwebz
- D. Linksys
Answer: D
NEW QUESTION # 22
During a security audit which test should result in a source packet failing to reach its intended destination?
- A. A packet originating from the company's internal network is sent to the company's DNS server
- B. A new connection request from the Internet is sent to a host on the company 's internal net work
- C. A packet originating from the company's DMZ is sent to a host on the company's internal network
- D. A new connection request from the internet is sent to the company's DNS server
Answer: B
NEW QUESTION # 23
To effectively implement the Data Protection CIS Control, which task needs to be implemented first?
- A. Employees need to be notified that proprietary data should be protected
- B. The organization's proprietary data needs to be identified
- C. Appropriate file content matching needs to be configured
- D. The organization's proprietary data needs to be encrypted
Answer: B
NEW QUESTION # 24
An administrator looking at a web application's log file found login attempts by the same host over several seconds. Each user ID was attempted with three different passwords. The event took place over 5 seconds.
* ROOT
* TEST
* ADMIN
* SQL
* USER
* NAGIOSGUEST
What is the most likely source of this event?
- A. An IT administrator attempting to use outdated credentials to enter the site
- B. An attempt to use SQL Injection to gain information from a web-connected database
- C. An automated tool that attempts to use a dictionary attack to infiltrate a website
- D. An attempted Denial of Service attack by locking out administrative accounts
Answer: C
NEW QUESTION # 25
DHCP logging output in the screenshot would be used for which of the following?
- A. Providing ping sweep results to identify live network hosts for vulnerability scanning.
- B. Detecting malicious activity by compromised or unauthorized devices on the network.
- C. Enforcing port-based network access control to prevent unauthorized devices on the network.
- D. Identifying new connections to maintain an up-to-date inventory of devices on the network.
Answer: D
NEW QUESTION # 26
Which type of scan is best able to determine if user workstations are missing any important patches?
- A. A source code scan
- B. A network vulnerability scan using aggressive scanning
- C. A port scan using banner grabbing
- D. A vulnerability scan using valid credentials
- E. A web application/database scan
Answer: D
NEW QUESTION # 27
How often should the security awareness program be communicated to employees?
- A. Monthly
- B. At orientation and review times
- C. Continuously
- D. Annually
Answer: C
NEW QUESTION # 28
Implementing which of the following will decrease spoofed e-mail messages?
- A. Sender Policy Framework
- B. Internet Message Access Protocol
- C. Finger Protocol
- D. Network Address Translation
Answer: A
NEW QUESTION # 29
Which of the following is a reliable way to test backed up data?
- A. Restore the data to a system
- B. Compare data hashes of backed up data to original systems
- C. Confirm the backup service is running at the proper time
- D. Verify the file size of the backup
Answer: A
NEW QUESTION # 30
How can the results of automated network configuration scans be used to improve the security of the network?
- A. Scanners can correct network configurations issues
- B. Reports can be sent to the CIO for performance benchmarks
- C. Results can be provided to network engineers as actionable feedback
- D. Results can be included in audit evidence failures
Answer: C
NEW QUESTION # 31
Which of the following actions produced the output seen below?
- A. An access rule was added to firewallrules.txt
- B. An access rule was removed from firewallrules.txt
- C. An access rule was removed from firewallrules2.txt
- D. An access rule was added to firewallrules2.txt
Answer: D
NEW QUESTION # 32
Of the options shown below, what is the first step in protecting network devices?
- A. Creating standard secure configurations for all devices
- B. Applying all known security patches
- C. Scanning the devices for known vulnerabilities
- D. Implementing IDS to detect attacks
Answer: A
NEW QUESTION # 33
What is the business goal of the Inventory and Control of Software Assets Control?
- A. All software conforms to licensing requirements for the business
- B. Only authorized software should be installed on the agency 's c omput er s ys t ems
- C. Accurate software versions and counts are documented for licensing updates
- D. Accurate software versions are captured to enable patching
Answer: B
NEW QUESTION # 34
An organization has implemented a control for penetration testing and red team exercises conducted on their network. They have compiled metrics showing the success of the penetration testing (Penetration Tests), as well as the number of actual adversary attacks they have sustained (External Attacks). Assess the metrics below and determine the appropriate interpretation with respect to this control.
- A. The red team is improving their capability to measure network security
- B. The blue team is adequately protecting the network
- C. The methods the red team is using are not effectively testing the network
- D. There are too many internal penetration tests being conducted
Answer: C
NEW QUESTION # 35
An auditor is validating the policies and procedures for an organization with respect to a control for Data Recovery. The organization's control states they will completely back up critical servers weekly, with incremental backups every four hours. Which action will best verify success of the policy?
- A. Verify that the backup media cannot be read without the encryption key
- B. Select a random file from a critical server and verify it is present in a backup set
- C. Restore the critical server data from backup and see if data is missing
- D. Check the backup logs from the critical servers and verify there are no errors
Answer: C
NEW QUESTION # 36
Which of the following actions will assist an organization specifically with implementing web application software security?
- A. Establishing network activity baselines among public-facing servers
- B. Having a plan to scan vulnerabilities of an application prior to deployment
- C. Providing end-user security training to both internal staff and vendors
- D. Making sure that all hosts are patched during regularly scheduled maintenance
Answer: B
NEW QUESTION # 37
Which projects enumerates or maps security issues to CVE?
- A. NIST
- B. ISO 2700
- C. CIS Controls
- D. SCAP
Answer: D
NEW QUESTION # 38
John is implementing a commercial backup solution for his organization. Which of the following steps should be on the configuration checklist?
- A. Develop a unique encryption scheme
- B. Disable software-level encryption to increase speed of transfer
- C. Enable encryption if it 's not enabled by default
Answer: C
NEW QUESTION # 39
Which of the following should be used to test antivirus software?
- A. EICAR
- B. FIPS 140-2
- C. Code Red
- D. Heartbleed
Answer: A
NEW QUESTION # 40
......
GIAC GCCC Exam is an important certification for security professionals who are looking to enhance their knowledge and skills in the critical security controls that are necessary to protect against cyber attacks. GIAC Critical Controls Certification (GCCC) certification is highly respected within the industry and can help to open up new career opportunities for those who obtain it.
To earn the GIAC GCCC certification, candidates must pass a rigorous examination that tests their knowledge and skills in critical security controls. GCCC exam consists of 115 multiple-choice questions that must be completed within a time limit of three hours. Candidates must score at least 71% to pass the exam and earn the certification. GIAC Critical Controls Certification (GCCC) certification is valid for four years and can be renewed by passing a recertification exam or earning continuing education credits.
Ultimate Guide to Prepare GCCC Certification Exam for Cyber Security: https://www.trainingquiz.com/GCCC-practice-quiz.html
GCCC Ultimate Study Guide: https://drive.google.com/open?id=1WBNGv4-M9pOaUeO8GRv7NFBXEhPky1Sr
