Best GCCC Exam Dumps for the Preparation of Latest Exam Questions
GCCC Actual Questions 100% Same Braindumps with Actual Exam!
To prepare for the GCCC exam, individuals can take advantage of a range of study materials provided by GIAC, including practice exams, online training courses, and study guides. These study materials are designed to help individuals prepare for the exam and gain a deeper understanding of critical security controls. Additionally, individuals can attend training courses provided by GIAC's certified instructors to gain hands-on experience in implementing these controls.
NEW QUESTION # 46
An organization has implemented a policy to detect and remove malicious software from its network. Which of the following actions is focused on correcting rather than preventing attack?
- A. Using Network access control to disable communication by hosts with viruses
- B. Training users to recognize potential phishing attempts
- C. Disabling autorun features on all workstations on the network
- D. Configuring a firewall to only allow communication to whitelisted hosts and ports
Answer: A
NEW QUESTION # 47
An organization is implementing a control within the Application Software Security CIS Control. How can they best protect against injection attacks against their custom web application and database applications?
- A. Ensure the web application server logs are going to a central log host
- B. Check user input against a list of reserved database terms
- C. Configure the web server to use Unicode characters only
- D. Filter input to only allow safe characters and strings
Answer: D
NEW QUESTION # 48
Which of the following items would be used reactively for incident response?
- A. A script used to verify patches are installed on systems
- B. A phone tree used to contact necessary personnel
- C. An IPS rule that prevents web access from international locations
- D. A schedule for creating and storing backup
Answer: B
NEW QUESTION # 49
An administrator looking at a web application's log file found login attempts by the same host over several seconds. Each user ID was attempted with three different passwords. The event took place over 5 seconds.
* ROOT
* TEST
* ADMIN
* SQL
* USER
* NAGIOSGUEST
What is the most likely source of this event?
- A. An attempted Denial of Service attack by locking out administrative accounts
- B. An attempt to use SQL Injection to gain information from a web-connected database
- C. An IT administrator attempting to use outdated credentials to enter the site
- D. An automated tool that attempts to use a dictionary attack to infiltrate a website
Answer: D
NEW QUESTION # 50
Which of the following is a requirement in order to implement the principle of least privilege?
- A. Discretionary Access Control (DAC)
- B. Mandatory Access Control (MAC)
- C. Data classification
- D. Data normalization
Answer: C
NEW QUESTION # 51
An Internet retailer's database was recently exploited by a foreign criminal organization via a remote attack.
The initial exploit resulted in immediate root-level access. What could have been done to prevent this level of access being given to the intruder upon successful exploitation?
- A. Configure the database to run with lower privileges
- B. Install host integrity monitoring software
- C. Install updated anti-virus software
- D. Configure the DMZ firewall to block unnecessary service
Answer: A
NEW QUESTION # 52
Acme Corporation performed an investigation of its centralized logging capabilities. It found that the central server is missing several types of logs from three servers in Acme's inventory. Given these findings, what is the most appropriate next step?
- A. Perform analysis to identify the source of the logging problems
- B. Define processes to manually review logs for the problem servers
- C. Restart or reinstall the logging service on each of the problem servers
- D. Document the missing logs in the core evaluation report as a minor issue
Answer: A
NEW QUESTION # 53
During a security audit which test should result in a source packet failing to reach its intended destination?
- A. A new connection request from the Internet is sent to a host on the company 's internal net work
- B. A packet originating from the company's DMZ is sent to a host on the company's internal network
- C. A new connection request from the internet is sent to the company's DNS server
- D. A packet originating from the company's internal network is sent to the company's DNS server
Answer: A
NEW QUESTION # 54
Which of the following is a benefit of stress-testing a network?
- A. To determine device behavior in a DoS condition.
- B. To determine the security configurations of the network
- C. To determine the connectivity of the network
- D. To determine bandwidth needs for the network.
Answer: A
NEW QUESTION # 55
Allied services have recently purchased NAC devices to detect and prevent non-company owned devices from attaching to their internal wired and wireless network. Corporate devices will be automatically added to the approved device list by querying Active Directory for domain devices. Non-approved devices will be placed on a protected VLAN with no network access. The NAC also offers a web portal that can be integrated with Active Directory to allow for employee device registration which will not be utilized in this deployment.
Which of the following recommendations would make NAC installation more secure?
- A. Disable the web portal device registration service
- B. Enforce company configuration standards for personal mobile devices
- C. Configure Active Directory to push an updated inventory to the NAC daily
- D. Change the wireless password following the NAC implementation
Answer: A
NEW QUESTION # 56
An analyst investigated unused organizational accounts. The investigation found that:
-10% of accounts still have their initial login password, indicating they were never used
-10% of accounts have not been used in over six months
Which change in policy would mitigate the security risk associated with both findings?
- A. Accounts without login activity for 15 days are automatically locked
- B. Accounts must have passwords of at least 8 characters, with one number or symbol
- C. Users are required to change their password at the next login after three months
Answer: A
NEW QUESTION # 57
A global corporation has major data centers in Seattle, New York, London and Tokyo. Which of the following is the correct approach from an intrusion detection and event correlation perspective?
- A. Configure all data center systems to use GMT time
- B. Configure all data center systems to use local time
- C. Synchronize between Seattle and New York, and use local time for London and Tokyo
- D. Configure all systems to use their default time settings
Answer: B
NEW QUESTION # 58
What tool creates visual network topology output and results that can be analyzed by Ndiff to determine if a service or network asset has changed?
- A. Ngrep
- B. CIS-CAT
- C. Netscreen
- D. Zenmap
Answer: D
NEW QUESTION # 59
What is an organization's goal in deploying a policy to encrypt all mobile devices?
- A. Applying the principle of defense in depth to their mobile devices
- B. Enabling best practices for the protection of their software licenses
- C. Providing their employees, a secure method of connecting to the corporate network
- D. Controlling unauthorized access to sensitive information
Answer: D
NEW QUESTION # 60
An attacker is able to successfully access a web application as root using ' or 1 = 1 . as the password. The successful access indicates a failure of what process?
- A. Account Management
- B. Output Sanitization
- C. URL Encoding
- D. Input Validation
Answer: D
NEW QUESTION # 61
Which of the following CIS Controls is used to manage the security lifecycle by validating that the documented controls are in place?
- A. Controlled Use of Administrative Privilege
- B. Data Protection
- C. Penetration Tests and Red Team Exercises
- D. Account Monitoring and Control
Answer: C
NEW QUESTION # 62
What type of Unified Modelling Language (UML) diagram is used to show dependencies between logical groupings in a system?
- A. Class diagram
- B. Package diagram
- C. Use case diagram
- D. Deployment diagram
Answer: B
NEW QUESTION # 63
Janice is auditing the perimeter of the network at Sugar Water InC. According to documentation, external SMTP traffic is only allowed to and from 10.10.10.25. Which of the following actions would demonstrate the rules are configured incorrectly?
- A. Receive mail at Sugar Water Inc. account using Outlook as a mail client
- B. Successfully deliver mail from another host inside the network directly to an external contact
- C. Receive spam from a known bad domain
- D. Successfully deliver mail from web client using another host inside the network to an external contact.
Answer: B
NEW QUESTION # 64
An organization is implementing an application software security control their custom-written code that provides web-based database access to sales partners. Which action will help mitigate the risk of the application being compromised?
- A. Identifying high-risk assets that are on the same network as the web application server
- B. Creating signatures for their IDS to detect attacks specific to their web application
- C. Logging the connection requests to the web application server from outside hosts
- D. Providing the source code for their web application to existing sales partners
Answer: B
NEW QUESTION # 65
Which activity increases the risk of a malware infection?
- A. Editing webpages with a Linux system
- B. Charging a smartphone using a computer USB port
- C. Reading email using a plain text email client
- D. Online banking in Incognito mode
Answer: B
NEW QUESTION # 66
John is implementing a commercial backup solution for his organization. Which of the following steps should be on the configuration checklist?
- A. Enable encryption if it 's not enabled by default
- B. Develop a unique encryption scheme
- C. Disable software-level encryption to increase speed of transfer
Answer: A
NEW QUESTION # 67
Executive management approved the storage of sensitive data on smartphones and tablets as long as they were encrypted. Later a vulnerability was announced at an information security conference that allowed attackers to bypass the device's authentication process, making the data accessible. The smartphone manufacturer said it would take six months for the vulnerability to be fixed and distributed through the cellular carriers. Four months after the vulnerability was announced, an employee lost his tablet and the sensitive information became public.
What was the failure that led to the information being lost?
- A. The employees failed to maintain their devices at the most current software version
- B. Vulnerability scans were not done to identify the devices that we at risk
- C. Management had not insured against the possibility of the information being lost
- D. There was no risk acceptance review after the risk changed
Answer: D
NEW QUESTION # 68
......
GIAC GCCC (GIAC Critical Controls Certification) exam is a professional certification program that is designed to evaluate the knowledge and skills of information security professionals in implementing and managing critical security controls. GIAC Critical Controls Certification (GCCC) certification program is based on the SANS Critical Security Controls (CSC) framework, which is a widely recognized and respected set of security controls that are designed to help organizations protect their critical assets from cyber threats.
GCCC Study Material, Preparation Guide and PDF Download: https://guidetorrent.passcollection.com/GCCC-valid-vce-dumps.html
