[Mar 14, 2025] Fully Updated Cyber Security (GCCC) Certification Sample Questions
Latest GIAC GCCC Real Exam Dumps PDF
Learn about the Key Features of GIAC GCCC Exam
The following are the key features of the GIAC GCCC Certification Exam:
- The GIAC GCCC Certification Exam prepares candidates for the associated job role by equipping them with the knowledge and skills required of a cyber security guard.
- The GIAC GCCC Exam covers all the core functions of a cyber security guard. The exam also thoroughly explores the security guard ability to respond to cyber threats.
- The certification exam is pre-integrated with the GIAC GCSE Certification. The pre-integrated format enables candidates to attain the GIAC GCSE Certification in record time. It also ensures that candidates have a basic understanding of cyber security principles and what cyber security entails.
- The certification exam is offered in both online and desktop formats. The online format facilitates easy access for candidates. It also makes it possible for GIAC Certifications to offer the certification exam at selected testing centers worldwide. This ensures that candidates can take the certification exam without having to travel long distances.
- The GIAC GSEC Certification is the latest addition in the range of GIAC certifications. It serves as a bridge between a security guard and a cyber security guard, bridging the gap between information technology and information security. This certification enables candidates to successfully manage cyber threats in an organization by integrating security concepts into their day-to-day operations.
NEW QUESTION # 23
Which of the following actions would best mitigate against phishing attempts such as the example below?
- A. Recommending against the use of Google Docs
- B. Having employee's complete user awareness training
- C. Making web filters to prevent accessing Google Docs
- D. Establishing email filters to block no-reply address emails
Answer: B
NEW QUESTION # 24
An organization is implementing a control within the Application Software Security CIS Control. How can they best protect against injection attacks against their custom web application and database applications?
- A. Check user input against a list of reserved database terms
- B. Filter input to only allow safe characters and strings
- C. Configure the web server to use Unicode characters only
- D. Ensure the web application server logs are going to a central log host
Answer: B
NEW QUESTION # 25
To effectively implement the Data Protection CIS Control, which task needs to be implemented first?
- A. Appropriate file content matching needs to be configured
- B. The organization's proprietary data needs to be encrypted
- C. Employees need to be notified that proprietary data should be protected
- D. The organization's proprietary data needs to be identified
Answer: D
NEW QUESTION # 26
Based on the data shown below.
Which wireless access point has the manufacturer default settings still in place?
- A. Hhonors
- B. Linksys
- C. Interwebz
- D. Starbucks
Answer: B
NEW QUESTION # 27
Acme Corporation performed an investigation of its centralized logging capabilities. It found that the central server is missing several types of logs from three servers in Acme's inventory. Given these findings, what is the most appropriate next step?
- A. Perform analysis to identify the source of the logging problems
- B. Define processes to manually review logs for the problem servers
- C. Document the missing logs in the core evaluation report as a minor issue
- D. Restart or reinstall the logging service on each of the problem servers
Answer: A
NEW QUESTION # 28
Which of the following archiving methods would maximize log integrity?
- A. USB flash drive
- B. DVD-R
- C. CD-RW
- D. Magnetic Tape
Answer: B
NEW QUESTION # 29
Which of the following is a requirement in order to implement the principle of least privilege?
- A. Discretionary Access Control (DAC)
- B. Mandatory Access Control (MAC)
- C. Data classification
- D. Data normalization
Answer: C
NEW QUESTION # 30
What is a zero-day attack?
- A. An attack that deploys at the end of a countdown sequence
- B. An attack that utilizes a vulnerability unknown to the software developer
- C. An attack that is launched the day the patch is released
- D. An attack that has a known attack signature but no available patch
Answer: B
NEW QUESTION # 31
Which of the following items would be used reactively for incident response?
- A. A script used to verify patches are installed on systems
- B. An IPS rule that prevents web access from international locations
- C. A schedule for creating and storing backup
- D. A phone tree used to contact necessary personnel
Answer: D
NEW QUESTION # 32
A global corporation has major data centers in Seattle, New York, London and Tokyo. Which of the following is the correct approach from an intrusion detection and event correlation perspective?
- A. Synchronize between Seattle and New York, and use local time for London and Tokyo
- B. Configure all data center systems to use local time
- C. Configure all data center systems to use GMT time
- D. Configure all systems to use their default time settings
Answer: B
NEW QUESTION # 33
Which of the following is necessary for implementing and automating the Continuous Vulnerability Assessment and Remediation CIS Control?
- A. Patch Management System
- B. Software Whitelisting System
- C. Penetration Testing System
- D. System Configuration Enforcement System
Answer: A
NEW QUESTION # 34
An organization has implemented a control for Controlled Use of Administrative Privileges. They are collecting audit data for each login, logout, and location for the root account of their MySQL server, but they are unable to attribute each of these logins to a specific user. What action can they take to rectify this?
- A. Blacklist client applications from being run in privileged mode.
- B. Force the root account to only be accessible from the system console.
- C. Force user accounts to use 'sudo' f or privileged use.
- D. Turn on SELinux and user process accounting for the MySQL server.
Answer: C
NEW QUESTION # 35
How does an organization's hardware inventory support the control for secure configurations?
- A. It identifies the life cycle of manufacturer support for hardware devices
- B. It provides a list of managed devices that should be secured
- C. It provides a list of unauthorized devices on the network
- D. It provides the MAC addresses for insecure network adapters
Answer: B
NEW QUESTION # 36
Which of the following is used to prevent spoofing of e-mail addresses?
- A. Sender Policy Framework
- B. DNS Security Extensions
- C. Simple Mail Transfer Protocol
- D. Public-Key Cryptography
Answer: A
NEW QUESTION # 37
An organization wants to test its procedure for data recovery. Which of the following will be most effective?
- A. Verifying that backup process is running when it should
- B. Verifying a file can be recovered from backup media
- C. Verifying there are no errors in the backup server logs
- D. Verifying that network backups can't be read in transit
Answer: B
NEW QUESTION # 38
Executive management approved the storage of sensitive data on smartphones and tablets as long as they were encrypted. Later a vulnerability was announced at an information security conference that allowed attackers to bypass the device's authentication process, making the data accessible. The smartphone manufacturer said it would take six months for the vulnerability to be fixed and distributed through the cellular carriers. Four months after the vulnerability was announced, an employee lost his tablet and the sensitive information became public.
What was the failure that led to the information being lost?
- A. Management had not insured against the possibility of the information being lost
- B. There was no risk acceptance review after the risk changed
- C. The employees failed to maintain their devices at the most current software version
- D. Vulnerability scans were not done to identify the devices that we at risk
Answer: B
NEW QUESTION # 39
An organization is implementing an application software security control their custom-written code that provides web-based database access to sales partners. Which action will help mitigate the risk of the application being compromised?
- A. Identifying high-risk assets that are on the same network as the web application server
- B. Logging the connection requests to the web application server from outside hosts
- C. Creating signatures for their IDS to detect attacks specific to their web application
- D. Providing the source code for their web application to existing sales partners
Answer: C
NEW QUESTION # 40
Which approach is recommended by the CIS Controls for performing penetration tests?
- A. Complete intrusive tests on test systems
- B. Execute all tests during network maintenance windows
- C. Utilize a single attack vector at a time
- D. Document a single vulnerability per system
Answer: A
NEW QUESTION # 41
What documentation should be gathered and reviewed for evaluating an Incident Response program?
- A. Policy and Procedures
- B. Staff member interviews
- C. Results from security training assessments
- D. NIST Cybersecurity Framework
Answer: A
NEW QUESTION # 42
Which of the following will decrease the likelihood of eavesdropping on a wireless network?
- A. Using Wired Equivalent Protocol (WEP)
- B. Putting the wireless network on a separate VLAN
- C. Broadcasting in the 5Ghz frequency
- D. Using EAP/TLS authentication and WPA2 with AES encryption
Answer: D
NEW QUESTION # 43
Implementing which of the following will decrease spoofed e-mail messages?
- A. Network Address Translation
- B. Sender Policy Framework
- C. Internet Message Access Protocol
- D. Finger Protocol
Answer: B
NEW QUESTION # 44
An organization has implemented a policy to continually detect and remove malware from its network. Which of the following is a detective control needed for this?
- A. Host-based anti-virus sends alerts to a central security console
- B. Network Intrusion Prevention sends alerts when RST packets are received
- C. Host-based firewall sends alerts when packets are sent to a closed port
- D. Network Intrusion Detection devices sends alerts when signatures are updated
Answer: A
NEW QUESTION # 45
What is an organization's goal in deploying a policy to encrypt all mobile devices?
- A. Enabling best practices for the protection of their software licenses
- B. Controlling unauthorized access to sensitive information
- C. Applying the principle of defense in depth to their mobile devices
- D. Providing their employees, a secure method of connecting to the corporate network
Answer: B
NEW QUESTION # 46
......
GIAC GCCC Dumps - Secret To Pass in First Attempt: https://prep4sure.real4dumps.com/GCCC-prep4sure-exam.html
