Curious about Actual GIAC Critical Controls (GCCC) Exam Questions?

Here are sample GIAC Critical Controls Certification (GCCC) Exam questions from real exam. You can get more GIAC Critical Controls (GCCC) Exam premium practice questions at TestInsights.

Page: 1 /
Total 93 questions

Want more questions? Get Premium Access.

Question 1

Which of the options below will do the most to reduce an organization's attack surface on the internet?

ADeploy an access control list on the perimeter router and limit inbound ICMP messages to echo requests only

BDeploy antivirus software on internet-facing hosts, and ensure that the signatures are updated regularly

CEnsure that rotation of duties is used with employees in order to compartmentalize the most important tasks

DEnsure only necessary services are running on Internet-facing hosts, and that they are hardened according to best practices

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ADeploy an access control list on the perimeter router and limit inbound ICMP messages to echo requests only

BDeploy antivirus software on internet-facing hosts, and ensure that the signatures are updated regularly

CEnsure that rotation of duties is used with employees in order to compartmentalize the most important tasks

DEnsure only necessary services are running on Internet-facing hosts, and that they are hardened according to best practices

0 / 1500

Question 2

To effectively implement the Data Protection CIS Control, which task needs to be implemented first?

AThe organization's proprietary data needs to be encrypted

BEmployees need to be notified that proprietary data should be protected

CThe organization's proprietary data needs to be identified

DAppropriate file content matching needs to be configured

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe organization's proprietary data needs to be encrypted

BEmployees need to be notified that proprietary data should be protected

CThe organization's proprietary data needs to be identified

DAppropriate file content matching needs to be configured

0 / 1500

Question 3

Given the audit finding below, which CIS Control was being measured?

GCCC Exam Question 3 Exhibit 1

AControlled Access Based on the Need to Know

BControlled Use of Administrative Privilege

CLimitation and Control of Network Ports, Protocols and Services

DSecure Configurations for Hardware and Software on Laptops, Workstations, and Servers

EInventory and Control of Hardware Assets

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AControlled Access Based on the Need to Know

BControlled Use of Administrative Privilege

CLimitation and Control of Network Ports, Protocols and Services

DSecure Configurations for Hardware and Software on Laptops, Workstations, and Servers

EInventory and Control of Hardware Assets

0 / 1500

Question 4

An administrator looking at a web application's log file found login attempts by the same host over several seconds. Each user ID was attempted with three different passwords. The event took place over 5 seconds.

ROOT

TEST

ADMIN

SQL

USER

NAGIOS GUEST

What is the most likely source of this event?

AAn IT administrator attempting to use outdated credentials to enter the site

BAn attempted Denial of Service attack by locking out administrative accounts

CAn automated tool that attempts to use a dictionary attack to infiltrate a website

DAn attempt to use SQL Injection to gain information from a web-connected database

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AAn IT administrator attempting to use outdated credentials to enter the site

BAn attempted Denial of Service attack by locking out administrative accounts

CAn automated tool that attempts to use a dictionary attack to infiltrate a website

DAn attempt to use SQL Injection to gain information from a web-connected database

0 / 1500

Question 5

An organization is implementing an application software security control their custom-written code that provides web---based database access to sales partners. Which action will help mitigate the risk of the application being compromised?

AProviding the source code for their web application to existing sales partners

BIdentifying high-risk assets that are on the same network as the web application server

CCreating signatures for their IDS to detect attacks specific to their web application

DLogging the connection requests to the web application server from outside hosts

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AProviding the source code for their web application to existing sales partners

BIdentifying high-risk assets that are on the same network as the web application server

CCreating signatures for their IDS to detect attacks specific to their web application

DLogging the connection requests to the web application server from outside hosts

0 / 1500

Page: 1 / 19
Total 93 questions

Unlock Full
GCCC Exam Features

In Just $49 You can Access

All Official Question Types
Interactive Web-Based Practice Test Software
No Installation or 3rd Party Software Required
Customize your practice sessions (Free Demo)
24/7 Customer Support

Get Full Access Now

Marked Questions
GCCC Exam

GCCC Exam Question 1
GCCC Exam Question 2
GCCC Exam Question 3
GCCC Exam Question 4
GCCC Exam Question 5

Download PDF File Demo

Try Web-Based Exam Practice Software Demo

Commenting

In order to participate in the comments you need to be logged-in.
You can sign-up or login