GIAC Critical Controls Certification (GCCC) - GCCC FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which of the following is a reliable way to test backed up data?

A. Confirm the backup service is running at the proper time B. Restore the data to a system C. Compare data hashes of backed up data to original systems D. Verify the file size of the backup

Discussion 0

Correct Answer: B Vote an answer

Question 2

Which of the following should be measured and analyzed regularly when implementing the Secure Configuration for Hardware and Software on Mobile Devices, Laptops, Workstations, and Servers CIS Control?

A. How long does it take to identify new unauthorized listening ports on the network systems B. What percentage of systems in the organization are using Network Level Authentication (NLA) C. What percentage of the organization's applications are using sandboxing products D. How long does it take to remove unauthorized software from the organization's systems E. What percentage of assets will have their settings enforced and redeployed

Discussion 0

Correct Answer: E Vote an answer

Question 3

What could a security team use the command line tool Nmap for when implementing the Inventory and Control of Hardware Assets Control?

A. Passively identify new devices B. Inventory offline databases C. Control which devices can connect to the network D. Actively identify new servers

Discussion 0

Correct Answer: D Vote an answer

Question 4

An organization is implementing an application software security control their custom-written code that provides web-based database access to sales partners. Which action will help mitigate the risk of the application being compromised?

A. Providing the source code for their web application to existing sales partners B. Identifying high-risk assets that are on the same network as the web application server C. Logging the connection requests to the web application server from outside hosts D. Creating signatures for their IDS to detect attacks specific to their web application

Discussion 0

Correct Answer: D Vote an answer

Question 5

An organization has implemented a control for Controlled Use of Administrative Privileges. They are collecting audit data for each login, logout, and location for the root account of their MySQL server, but they are unable to attribute each of these logins to a specific user. What action can they take to rectify this?

A. Turn on SELinux and user process accounting for the MySQL server. B. Blacklist client applications from being run in privileged mode. C. Force the root account to only be accessible from the system console. D. Force user accounts to use 'sudo' f or privileged use.

Discussion 0

Correct Answer: D Vote an answer

Question 6

As part of a scheduled network discovery scan, what function should the automated scanning tool perform?

A. Automatically close ports and services not included in the current baseline B. Alert the incident response team on ports and services added since the last scan C. Compare discovered ports and services to a known baseline to report deviations D. Uninstall listening services that have not been used since the last scheduled scan

Discussion 0

Correct Answer: C Vote an answer

Question 7

An administrator looking at a web application's log file found login attempts by the same host over several seconds. Each user ID was attempted with three different passwords. The event took place over 5 seconds.
* ROOT
* TEST
* ADMIN
* SQL
* USER
* NAGIOSGUEST
What is the most likely source of this event?

A. An attempt to use SQL Injection to gain information from a web-connected database B. An IT administrator attempting to use outdated credentials to enter the site C. An attempted Denial of Service attack by locking out administrative accounts D. An automated tool that attempts to use a dictionary attack to infiltrate a website

Discussion 0

Correct Answer: D Vote an answer

Question 8

As part of an effort to implement a control on E-mail and Web Protections, an organization is monitoring their webserver traffic. Which event should they receive an alert on?

A. The number of website hits is higher that the daily average B. The logfiles of the webserver are rotated and archived C. The website does not respond to a SYN packet for 30 minutes D. The website issues a RST to a client after the connection is idle

Discussion 0

Correct Answer: C Vote an answer

Question 9

What is a recommended defense for the CIS Control for Application Software Security?

A. Run a dedicated vulnerability scanner against backend databases B. Display system error messages for only non-kernel related events C. Keep debugging code in production web applications for quick troubleshooting D. Limit access to the web application production environment to just the developers

Discussion 0

Correct Answer: A Vote an answer

Question 10

What tool creates visual network topology output and results that can be analyzed by Ndiff to determine if a service or network asset has changed?

A. Netscreen B. CIS-CAT C. Zenmap D. Ngrep

Discussion 0

Correct Answer: C Vote an answer