[Oct-2022] GIAC GCCC Dumps – Reduce Your Chance of Failure in GCCC Exam [Q38-Q59]

QUESTION 38
An auditor is validating the policies and procedures for an organization with respect to a control for Data Recovery. The organization’s control states they will completely back up critical servers weekly, with incremental backups every four hours. Which action will best verify success of the policy?

QUESTION 39
Which of the following best describes the CIS Controls?

QUESTION 40
What is the relationship between a service and its associated port?

QUESTION 41
An organization has installed a firewall for Boundary Defense. It allows only outbound traffic from internal workstations for web and SSH, allows connections from the internet to the DMZ, and allows guest wireless access to the internet only. How can an auditor validate these rules?

QUESTION 42
Which of the following archiving methods would maximize log integrity?

QUESTION 43
Which of the following is a responsibility of a change management board?

QUESTION 44
An organization is implementing a control for the Account Monitoring and Control CIS Control, and have set the Account Lockout Policy as shown below. What is the risk presented by these settings?

QUESTION 45
Which of the following actions would best mitigate against phishing attempts such as the example below?

QUESTION 46
An organization has created a policy that allows software from an approved list of applications to be installed on workstations. Programs not on the list should not be installed. How can the organization best monitor compliance with the policy?

QUESTION 47
An organization has implemented a policy to continually detect and remove malware from its network. Which of the following is a detective control needed for this?

QUESTION 48
During a security audit which test should result in a source packet failing to reach its intended destination?

QUESTION 49
If an attacker wanted to dump hashes or run wmic commands on a target machine, which of the following tools would he use?

QUESTION 50
Which of the following is a requirement in order to implement the principle of least privilege?

QUESTION 51
Which activity increases the risk of a malware infection?

QUESTION 52
Which of the following CIS Controls is used to manage the security lifecycle by validating that the documented controls are in place?

QUESTION 53
Which of the following is used to prevent spoofing of e-mail addresses?

QUESTION 54
Which of the following actions will assist an organization specifically with implementing web application software security?

QUESTION 55
As part of an effort to implement a control on E-mail and Web Protections, an organization is monitoring their webserver traffic. Which event should they receive an alert on?

QUESTION 56
Dragonfly Industries requires firewall rules to go through a change management system before they are configured. Review the change management log. Which of the following lines in your firewall ruleset has expired and should be removed from the configuration?

QUESTION 57
When evaluating the Wireless Access Control CIS Control, which of the following systems needs to be tested?

QUESTION 58
Which of the following is necessary to automate a control for Inventory and Control of Hardware Assets?

QUESTION 59
An analyst investigated unused organizational accounts. The investigation found that:
-10% of accounts still have their initial login password, indicating they were never used
-10% of accounts have not been used in over six months
Which change in policy would mitigate the security risk associated with both findings?