[Q18-Q41] The Best Valid GCCC Dumps for Helping Passing GCCC Exam!

13 Jan, 2024 By admin GCCC, GIAC 0 Comments

[Q18-Q41] The Best Valid GCCC Dumps for Helping Passing GCCC Exam!

Rate this post

The Best Valid GCCC Dumps for Helping Passing GCCC Exam!

UPDATED GIAC GCCC Exam Questions & Answer

The GCCC certification is an essential certification for cybersecurity professionals who want to demonstrate their knowledge and skills in implementing critical security controls. GIAC Critical Controls Certification (GCCC) certification is globally recognized and is an excellent way to showcase practical skills in managing cybersecurity threats. With the increasing number of cyber threats, the GCCC certification is becoming more valuable, and individuals who hold this certification are in high demand in the job market.

GIAC GCCC Exam is designed for security professionals who are responsible for designing, implementing, and managing critical security controls within their organizations. GCCC exam covers a range of topics, including network security, access control, data protection, and incident response. GCCC exam is designed to test the candidate’s knowledge and understanding of the critical security controls and their ability to implement them effectively.

Q18. Which of the following can be enabled on a Linux based system in order to make it more difficult for an attacker to execute malicious code after launching a buffer overflow attack?

ASLR

Tripwire

SUID

Iptables

TCP Wrappers

Q19. Review the below results of an audit on a server. Based on these results, which document would you recommend be reviewed for training or updates?

Procedure for authorizing remote server access

Procedure for modifying file permissions

Procedure for adjusting network share permissions

Procedure for setting and resetting user passwords

Q20. Which approach is recommended by the CIS Controls for performing penetration tests?

Document a single vulnerability per system

Utilize a single attack vector at a time

Complete intrusive tests on test systems

Execute all tests during network maintenance windows

Q21. Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?

The loghost is missing logs from 3 servers in the inventory

The loghost is receiving logs from hosts with different timezone values

The loghost time is out-of-sync with an external host

The loghost is receiving out-of-sync logs from undocumented servers

Q22. Which of the following CIS Controls is used to manage the security lifecycle by validating that the documented controls are in place?

Controlled Use of Administrative Privilege

Account Monitoring and Control

Data Protection

Penetration Tests and Red Team Exercises

Q23. What is the first step suggested before implementing any single CIS Control?

Develop an effectiveness test

Perform a gap analysis

Perform a vulnerability scan

Develop a roll-out schedule

Q24. During a security audit which test should result in a source packet failing to reach its intended destination?

A new connection request from the Internet is sent to a host on the company ‘s internal net work

A packet originating from the company’s DMZ is sent to a host on the company’s internal network

A new connection request from the internet is sent to the company’s DNS server

A packet originating from the company’s internal network is sent to the company’s DNS server

Q25. Which activity increases the risk of a malware infection?

Charging a smartphone using a computer USB port

Editing webpages with a Linux system

Reading email using a plain text email client

Online banking in Incognito mode

Q26. Which CIS Control includes storing system images on a hardened server, scanning production systems for out-of-date software, and using file integrity assessment tools like tripwire?

Inventory of Authorized and Unauthorized Software

Continuous Vulnerability Management

Secure Configurations for Network Devices such as Firewalls, Routers and Switches

Secure Configurations for Hardware and Software on Mobile Devices, Laptops, Workstations, and Servers

Q27. How can the results of automated network configuration scans be used to improve the security of the network?

Reports can be sent to the CIO for performance benchmarks

Results can be provided to network engineers as actionable feedback

Scanners can correct network configurations issues

Results can be included in audit evidence failures

Q28. An organization has implemented a policy to continually detect and remove malware from its network. Which of the following is a detective control needed for this?

Host-based firewall sends alerts when packets are sent to a closed port

Network Intrusion Prevention sends alerts when RST packets are received

Network Intrusion Detection devices sends alerts when signatures are updated

Host-based anti-virus sends alerts to a central security console

Q29. An organization has implemented a control for Controlled Use of Administrative Privileges. They are collecting audit data for each login, logout, and location for the root account of their MySQL server, but they are unable to attribute each of these logins to a specific user. What action can they take to rectify this?

Force the root account to only be accessible from the system console.

Turn on SELinux and user process accounting for the MySQL server.

Force user accounts to use ‘sudo’ f or privileged use.

Blacklist client applications from being run in privileged mode.

Q30. An organization has installed a firewall for Boundary Defense. It allows only outbound traffic from internal workstations for web and SSH, allows connections from the internet to the DMZ, and allows guest wireless access to the internet only. How can an auditor validate these rules?

Check for packets going from the Internet to the Web server

Try to send email from a wireless guest account

Check for packages going from the web server to the user workstations

Try to access the internal network from the wireless router

Q31. Of the options shown below, what is the first step in protecting network devices?

Creating standard secure configurations for all devices

Scanning the devices for known vulnerabilities

Implementing IDS to detect attacks

Applying all known security patches

Q32. An organization has implemented a control for Controlled Use of Administrative Privilege. The control requires users to enter a password from their own user account before being allowed elevated privileges, and that no client applications (e.g. web browsers, e-mail clients) can be run with elevated privileges. Which of the following actions will validate this control is implemented properly?

Check the log entries to match privilege use with access from authorized users.

Run a script at intervals to identify processes running with administrative privilege.

Force the root account to only be accessible from the system console.

Q33. To effectively implement the Data Protection CIS Control, which task needs to be implemented first?

The organization’s proprietary data needs to be encrypted

Employees need to be notified that proprietary data should be protected

The organization’s proprietary data needs to be identified

Appropriate file content matching needs to be configured

Q34. Below is a screenshot from a deployed next-generation firewall. These configuration settings would be a defensive measure for which CIS Control?

Controlled Access Based on the Need to Know

Limitation and Control of Network Ports, Protocols and Services

Email and Web Browser Protections

Secure Configuration for Network Devices, such as Firewalls, Routers and Switches.

Q35. What is the business goal of the Inventory and Control of Software Assets Control?

Only authorized software should be installed on the agency ‘s c omput er s ys t ems

All software conforms to licensing requirements for the business

Accurate software versions are captured to enable patching

Accurate software versions and counts are documented for licensing updates

Q36. Beta corporation is doing a core evaluation of its centralized logging capabilities. The security staff suspects that the central server has several log files over the past few weeks that have had their contents changed. Given this concern, and the need to keep archived logs for log correction applications, what is the most appropriate next steps?

Keep the files in the log archives synchronized with another location.

Store the files read-only and keep hashes of the logs separately.

Install a tier one timeserver on the network to keep log devices synchronized.

Encrypt the log files with an asymmetric key and remove the cleartext version.

Q37. Which of the following actions would best mitigate against phishing attempts such as the example below?

Establishing email filters to block no-reply address emails

Making web filters to prevent accessing Google Docs

Having employee’s complete user awareness training

Recommending against the use of Google Docs

Q38. An organization has implemented a policy to detect and remove malicious software from its network. Which of the following actions is focused on correcting rather than preventing attack?

Configuring a firewall to only allow communication to whitelisted hosts and ports

Using Network access control to disable communication by hosts with viruses

Disabling autorun features on all workstations on the network

Training users to recognize potential phishing attempts

Q39. Which of the following is used to prevent spoofing of e-mail addresses?

Sender Policy Framework

DNS Security Extensions

Public-Key Cryptography

Simple Mail Transfer Protocol

Q40. An organization has created a policy that allows software from an approved list of applications to be installed on workstations. Programs not on the list should not be installed. How can the organization best monitor compliance with the policy?

Comparing system snapshots and alerting when changes are made

Auditing Active Directory and alerting when new accounts are created

Performing regular port scans of workstations on the network

Creating an IDS signature to alert based on unknown “User-Agent ” strings

Q41. John is implementing a commercial backup solution for his organization. Which of the following steps should be on the configuration checklist?

Enable encryption if it ‘s not enabled by default

Disable software-level encryption to increase speed of transfer

Develop a unique encryption scheme