The GIAC GCCC Questions & Practice Test are Available On-Demand
Valid GCCC Exam Dumps Ensure you a HIGH SCORE
The GCCC certification is an essential certification for cybersecurity professionals who want to demonstrate their knowledge and skills in implementing critical security controls. GIAC Critical Controls Certification (GCCC) certification is globally recognized and is an excellent way to showcase practical skills in managing cybersecurity threats. With the increasing number of cyber threats, the GCCC certification is becoming more valuable, and individuals who hold this certification are in high demand in the job market.
NEW QUESTION # 33
An organization is implementing a control within the Application Software Security CIS Control. How can they best protect against injection attacks against their custom web application and database applications?
- A. Configure the web server to use Unicode characters only
- B. Check user input against a list of reserved database terms
- C. Filter input to only allow safe characters and strings
- D. Ensure the web application server logs are going to a central log host
Answer: C
NEW QUESTION # 34
What is the list displaying?
- A. Allowed program in a software inventory application
- B. Unauthorized programs detected in a software inventory
- C. Installed software on an end-user device
- D. Missing patches from a patching server
Answer: A
NEW QUESTION # 35
An auditor is focusing on potential vulnerabilities. Which of the following should cause an alert?
- A. Workstation on which a domain admin has never logged in
- B. Windows host with an uptime of 382 days
- C. Server that has zero browser plug-ins
- D. Fully patched guest machine that is not in the asset inventory
Answer: B
NEW QUESTION # 36
What could a security team use the command line tool Nmap for when implementing the Inventory and Control of Hardware Assets Control?
- A. Actively identify new servers
- B. Passively identify new devices
- C. Inventory offline databases
- D. Control which devices can connect to the network
Answer: A
NEW QUESTION # 37
How does an organization's hardware inventory support the control for secure configurations?
- A. It provides the MAC addresses for insecure network adapters
- B. It provides a list of unauthorized devices on the network
- C. It provides a list of managed devices that should be secured
- D. It identifies the life cycle of manufacturer support for hardware devices
Answer: C
NEW QUESTION # 38
An organization is implementing a control for the Account Monitoring and Control CIS Control, and have set the Account Lockout Policy as shown below. What is the risk presented by these settings?
- A. Password length and complexity will be automatically reduced.
- B. Brute-force password attacks could be more effective.
- C. Legitimate users could be unable to access resources.
- D. Once accounts are locked, they cannot be unlocked.
Answer: C
NEW QUESTION # 39
Acme Corporation performed an investigation of its centralized logging capabilities. It found that the central server is missing several types of logs from three servers in Acme's inventory. Given these findings, what is the most appropriate next step?
- A. Restart or reinstall the logging service on each of the problem servers
- B. Perform analysis to identify the source of the logging problems
- C. Document the missing logs in the core evaluation report as a minor issue
- D. Define processes to manually review logs for the problem servers
Answer: B
NEW QUESTION # 40
Executive management approved the storage of sensitive data on smartphones and tablets as long as they were encrypted. Later a vulnerability was announced at an information security conference that allowed attackers to bypass the device's authentication process, making the data accessible. The smartphone manufacturer said it would take six months for the vulnerability to be fixed and distributed through the cellular carriers. Four months after the vulnerability was announced, an employee lost his tablet and the sensitive information became public.
What was the failure that led to the information being lost?
- A. There was no risk acceptance review after the risk changed
- B. Vulnerability scans were not done to identify the devices that we at risk
- C. The employees failed to maintain their devices at the most current software version
- D. Management had not insured against the possibility of the information being lost
Answer: A
NEW QUESTION # 41
According to attack lifecycle models, what is the attacker's first step in compromising an organization?
- A. Reconnaissance
- B. Exploitation
- C. Initial Compromise
- D. Privilege Escalation
Answer: A
NEW QUESTION # 42
Of the options shown below, what is the first step in protecting network devices?
- A. Applying all known security patches
- B. Implementing IDS to detect attacks
- C. Scanning the devices for known vulnerabilities
- D. Creating standard secure configurations for all devices
Answer: D
NEW QUESTION # 43
When evaluating the Wireless Access Control CIS Control, which of the following systems needs to be tested?
- A. 802.1x authentication systems
- B. PII data scanner
- C. Log management system
- D. Data classification and access baselines
Answer: A
NEW QUESTION # 44
Which activity increases the risk of a malware infection?
- A. Reading email using a plain text email client
- B. Charging a smartphone using a computer USB port
- C. Editing webpages with a Linux system
- D. Online banking in Incognito mode
Answer: B
NEW QUESTION # 45
What is the first step suggested before implementing any single CIS Control?
- A. Perform a vulnerability scan
- B. Perform a gap analysis
- C. Develop an effectiveness test
- D. Develop a roll-out schedule
Answer: B
NEW QUESTION # 46
After installing a software package on several workstations, an administrator discovered the software opened network port TCP 23456 on each workstation. The port is part of a software management function that is not needed on corporate workstations. Which actions would best protect the computers with the software package installed?
- A. Determine which service controls the software management function and opens the port, and disable it
- B. Redirect traffic to and from the software management port to a non-default port
- C. Document the port number and request approval from a change control group
- D. Block TCP 23456 at the network perimeter firewall
Answer: A
NEW QUESTION # 47
Given the audit finding below, which CIS Control was being measured?
- A. Controlled Access Based on the Need to Know
- B. Controlled Use of Administrative Privilege
- C. Limitation and Control of Network Ports, Protocols and Services
- D. Secure Configurations for Hardware and Software on Laptops, Workstations, and Servers
- E. Inventory and Control of Hardware Assets
Answer: B
NEW QUESTION # 48
Which of the following can be enabled on a Linux based system in order to make it more difficult for an attacker to execute malicious code after launching a buffer overflow attack?
- A. SUID
- B. Iptables
- C. Tripwire
- D. TCP Wrappers
- E. ASLR
Answer: E
NEW QUESTION # 49
An organization has implemented a control for Controlled Use of Administrative Privileges. They are collecting audit data for each login, logout, and location for the root account of their MySQL server, but they are unable to attribute each of these logins to a specific user. What action can they take to rectify this?
- A. Force the root account to only be accessible from the system console.
- B. Blacklist client applications from being run in privileged mode.
- C. Force user accounts to use 'sudo' f or privileged use.
- D. Turn on SELinux and user process accounting for the MySQL server.
Answer: C
NEW QUESTION # 50
An attacker is able to successfully access a web application as root using ' or 1 = 1 . as the password. The successful access indicates a failure of what process?
- A. Account Management
- B. URL Encoding
- C. Output Sanitization
- D. Input Validation
Answer: D
NEW QUESTION # 51
......
To qualify for the GIAC GCCC certification, candidates must have at least two years of experience in information security and have completed the SANS SEC566 Implementing and Auditing the Critical Security Controls course. GCCC exam consists of 115 multiple-choice questions and must be completed within four hours. GCCC exam is designed to test the candidate's knowledge in areas such as assessing and managing risks, implementing and monitoring critical security controls, detecting and responding to incidents, and developing and implementing security policies and procedures. Upon passing the exam, candidates will receive the GIAC GCCC certification, which is valid for four years.
GIAC Critical Controls Certification (GCCC) is a certification exam that focuses on the critical controls necessary to protect information systems and networks from cyber threats. GCCC exam is designed to test an individual's knowledge and skills in implementing and managing critical security controls, as well as evaluating and improving an organization's security posture.
GCCC Exam Practice Questions prepared by GIAC Professionals: https://www.practicedump.com/GCCC_actualtests.html
Pass GCCC Exam with Latest Questions: https://drive.google.com/open?id=1s1tBxx2nO2wBAku2qFFXhGqKVuNdaIJR