GIAC GCCC Exam Questions Instant Access - No Installation Required

Question 1

How does an organization's hardware inventory support the control for secure configurations?

AIt provides a list of managed devices that should be secured

BIt provides a list of unauthorized devices on the network

CIt provides the MAC addresses for insecure network adapters

DIt identifies the life cycle of manufacturer support for hardware devices

Answer : A

Question 2

Which of the following is necessary for implementing and automating the Continuous Vulnerability Assessment and Remediation CIS Control?

ASoftware Whitelisting System

BSystem Configuration Enforcement System

CPatch Management System

DPenetration Testing System

Answer : C

Question 3

A global corporation has major data centers in Seattle, New York, London and Tokyo. Which of the following is the correct approach from an intrusion detection and event correlation perspective?

AConfigure all data center systems to use local time

BConfigure all data center systems to use GMT time

CConfigure all systems to use their default time settings

DSynchronize between Seattle and New York, and use local time for London and Tokyo

Answer : A

Question 4

An organization has installed a firewall for Boundary Defense. It allows only outbound traffic from internal workstations for web and SSH, allows connections from the internet to the DMZ, and allows guest wireless access to the internet only. How can an auditor validate these rules?

ACheck for packets going from the Internet to the Web server

BTry to send email from a wireless guest account

CCheck for packages going from the web server to the user workstations

DTry to access the internal network from the wireless router

Answer : D

Question 5

Which of the following archiving methods would maximize log integrity?

ADVD-R

BUSB flash drive

CMagnetic Tape

DCD-RW

Answer : A

Question 6

As part of an effort to implement a control on E-mail and Web Protections, an organization is monitoring their webserver traffic. Which event should they receive an alert on?

AThe number of website hits is higher that the daily average

BThe logfiles of the webserver are rotated and archived

CThe website does not respond to a SYN packet for 30 minutes

DThe website issues a RST to a client after the connection is idle

Answer : C

Question 7

Dragonfly Industries requires firewall rules to go through a change management system before they are configured. Review the change management log. Which of the following lines in your firewall ruleset has expired and should be removed from the configuration?

Aaccess-list outbound permit tcp host 10.1.1.7 any eq smtp

Baccess-list outbound deny tcp any host 74.125.228.2 eq www

Caccess-list inbound permit tcp 8.8.0.0 0.0.0.255 10.10.12.252 eq 8080

Daccess-list inbound permit tcp host 8.8.207.97 host 10.10.12.100 eq ssh

Answer : D

GIAC Critical Controls Certification GCCC Exam Questions