GIAC GCCC Practice Exam Questions

GIAC GCCC Sample Question Answers

Question # 1

Allied services have recently purchased NAC devices to detect and prevent non-company owned devices from attaching to their internal wired and wireless network. Corporate devices will be automatically added to the approved device list by querying Active Directory for domain devices. Non-approved devices will be placed on a protected VLAN with no network access. The NAC also offers a web portal that can be integrated with Active Directory to allow for employee device registration which will not be utilized in this deployment. Which of the following recommendations would make NAC installation more secure?

A. Enforce company configuration standards for personal mobile devices
B. Configure Active Directory to push an updated inventory to the NAC daily
C. Disable the web portal device registration service
D. Change the wireless password following the NAC implementation 

Show Answer

Question # 2

Which of the following assigns a number indicating the severity of a discovered software vulnerability?

A. CPE
B. CVE
C. CCE
D. CVSS 

Show Answer

Question # 3

Which type of scan is best able to determine if user workstations are missing any important patches?

A. A network vulnerability scan using aggressive scanning
B. A source code scan
C. A port scan using banner grabbing
D. A web application/database scan
E. A vulnerability scan using valid credentials 

Show Answer

Question # 4

A breach was discovered after several customers reported fraudulent charges on their accounts. The attacker had exported customer logins and cracked passwords that were hashed but not salted. Customers were made to reset their passwords. Shortly after the systems were cleaned and restored to service, it was discovered that a compromised system administrator’s account was being used to give the attacker continued access to the network. Which CIS Control failed in the continued access to the network? 

A. Maintenance, Monitoring, and Analysis of Audit Logs
B. Controlled Use of Administrative Privilege
C. Incident Response and Management
D. Account Monitoring and Control 

Show Answer

Question # 5

Which activity increases the risk of a malware infection? 

A. Charging a smartphone using a computer USB port
B. Editing webpages with a Linux system
C. Reading email using a plain text email client
D. Online banking in Incognito mode

Show Answer

Question # 6

To effectively implement the Data Protection CIS Control, which task needs to be implemented first? 

A. The organization’s proprietary data needs to be encrypted
B. Employees need to be notified that proprietary data should be protected
C. The organization’s proprietary data needs to be identified
D. Appropriate file content matching needs to be configured

Show Answer

Question # 7

Which of the following is a benefit of stress-testing a network? 

A. To determine device behavior in a DoS condition.
B. To determine bandwidth needs for the network.
C. To determine the connectivity of the network
D. To determine the security configurations of the network 

Show Answer

Question # 8

After installing a software package on several workstations, an administrator discovered the software opened network port TCP 23456 on each workstation. The port is part of a software management function that is not needed on corporate workstations. Which actions would best protect the computers with the software package installed?

A. Document the port number and request approval from a change control group
B. Redirect traffic to and from the software management port to a non-default port
C. Block TCP 23456 at the network perimeter firewall
D. Determine which service controls the software management function and opens theport, and disable it 

Show Answer

Question # 9

An auditor is validating the policies and procedures for an organization with respect to a control for Data Recovery. The organization’s control states they will completely back up critical servers weekly, with incremental backups every four hours. Which action will best verify success of the policy?

A. Verify that the backup media cannot be read without the encryption key
B. Check the backup logs from the critical servers and verify there are no errors
C. Select a random file from a critical server and verify it is present in a backup set
D. Restore the critical server data from backup and see if data is missing

Show Answer

Question # 10

What is a zero-day attack? 

A. An attack that has a known attack signature but no available patch  
B. An attack that utilizes a vulnerability unknown to the software developer
C. An attack that deploys at the end of a countdown sequence
D. An attack that is launched the day the patch is released 

Show Answer