GIAC GCCC Exam Questions Instant Access - No Installation Required

Question 1

An organization is implementing a control for the Limitation and Control of Network Ports, Protocols, and Services CIS Control. Which action should they take when they discover that an application running on a web server is no longer needed?

AUninstall the application providing the service

BTurn the service off in the host configuration files

CBlock the protocol for the unneeded service at the firewall

DCreate an access list on the router to filter traffic to the host

Answer : A

Question 2

Which of the following items would be used reactively for incident response?

AA schedule for creating and storing backup

BA phone tree used to contact necessary personnel

CA script used to verify patches are installed on systems

DAn IPS rule that prevents web access from international locations

Answer : B

Question 3

Review the below results of an audit on a server. Based on these results, which document would you recommend be reviewed for training or updates?

AProcedure for authorizing remote server access

BProcedure for modifying file permissions

CProcedure for adjusting network share permissions

DProcedure for setting and resetting user passwords

Answer : D

Question 4

What is the list displaying?

AAllowed program in a software inventory application

BUnauthorized programs detected in a software inventory

CMissing patches from a patching server

DInstalled software on an end-user device

Answer : A

Question 5

A security incident investigation identified the following modified version of a legitimate system file on a compromised client:

C:\Windows\System32\winxml.dll Addition Jan. 16, 2014 4:53:11 PM

The infection vector was determined to be a vulnerable browser plug-in installed by the user. Which of the organization's CIS Controls failed?

AApplication Software Security

BInventory and Control of Software Assets

CMaintenance, Monitoring, and Analysis of Audit Logs

DInventory and Control of Hardware Assets

Answer : B

Question 6

Beta corporation is doing a core evaluation of its centralized logging capabilities. The security staff suspects that the central server has several log files over the past few weeks that have had their contents changed. Given this concern, and the need to keep archived logs for log correction applications, what is the most appropriate next steps?

AKeep the files in the log archives synchronized with another location.

BStore the files read-only and keep hashes of the logs separately.

CInstall a tier one timeserver on the network to keep log devices synchronized.

DEncrypt the log files with an asymmetric key and remove the cleartext version.

Answer : B

Question 7

What is the first step suggested before implementing any single CIS Control?

ADevelop an effectiveness test

BPerform a gap analysis

CPerform a vulnerability scan

DDevelop a roll-out schedule

Answer : B

GIAC Critical Controls Certification GCCC Exam Questions