GIAC GCCC Exam Questions Instant Access - No Installation Required

Question 1

Which of the following should be used to test antivirus software?

AFIPS 140-2

BCode Red

CHeartbleed

DEICAR

Answer : D

Question 2

What is the list displaying?

AAllowed program in a software inventory application

BUnauthorized programs detected in a software inventory

CMissing patches from a patching server

DInstalled software on an end-user device

Answer : A

Question 3

An auditor is focusing on potential vulnerabilities. Which of the following should cause an alert?

AWorkstation on which a domain admin has never logged in

BWindows host with an uptime of 382 days

CServer that has zero browser plug-ins

DFully patched guest machine that is not in the asset inventory

Answer : B

Question 4

As part of a scheduled network discovery scan, what function should the automated scanning tool perform?

AUninstall listening services that have not been used since the last scheduled scan

BCompare discovered ports and services to a known baseline to report deviations

CAlert the incident response team on ports and services added since the last scan

DAutomatically close ports and services not included in the current baseline

Answer : B

Question 5

An analyst investigated unused organizational accounts. The investigation found that:

- 10% of accounts still have their initial login password, indicating they were never used

- 10% of accounts have not been used in over six months

Which change in policy would mitigate the security risk associated with both findings?

AUsers are required to change their password at the next login after three months

BAccounts must have passwords of at least 8 characters, with one number or symbol

CAccounts without login activity for 15 days are automatically locked

Answer : C

Question 6

To effectively implement the Data Protection CIS Control, which task needs to be implemented first?

AThe organization's proprietary data needs to be encrypted

BEmployees need to be notified that proprietary data should be protected

CThe organization's proprietary data needs to be identified

DAppropriate file content matching needs to be configured

Answer : C

Question 7

Which of the following is necessary for implementing and automating the Continuous Vulnerability Assessment and Remediation CIS Control?

ASoftware Whitelisting System

BSystem Configuration Enforcement System

CPatch Management System

DPenetration Testing System

Answer : C

GIAC Critical Controls Certification GCCC Exam Questions