GIAC Critical Controls Certification (GCCC) (GCCC) Practice Test

Questions # 21:

Which of the following is necessary to automate a control for Inventory and Control of Hardware Assets?

Options:

A method of device scanning

A centralized time server

An up-to-date hardening guide

An inventory of unauthorized assets

Questions # 22:

Which CIS Control includes storing system images on a hardened server, scanning production systems for out-of-date software, and using file integrity assessment tools like tripwire?

Options:

Inventory of Authorized and Unauthorized Software

Continuous Vulnerability Management

Secure Configurations for Network Devices such as Firewalls, Routers and Switches

Secure Configurations for Hardware and Software on Mobile Devices, Laptops, Workstations, and Servers

Questions # 23:

What could a security team use the command line tool Nmap for when implementing the Inventory and Control of Hardware Assets Control?

Options:

Control which devices can connect to the network

Passively identify new devices

Inventory offline databases

Actively identify new servers

Questions # 24:

The settings in the screenshot would be configured as part of which CIS Control?

Question # 24

Options:

Application Software Security

Inventory and Control of Hardware Assets

Account Monitoring and Control

Controlled Use of Administrative Privileges

Questions # 25:

Which of the following is a benefit of stress-testing a network?

Options:

To determine device behavior in a DoS condition.

To determine bandwidth needs for the network.

To determine the connectivity of the network

To determine the security configurations of the network

Questions # 26:

An auditor is focusing on potential vulnerabilities. Which of the following should cause an alert?

Options:

Workstation on which a domain admin has never logged in

Windows host with an uptime of 382 days

Server that has zero browser plug-ins

Fully patched guest machine that is not in the asset inventory

Questions # 27:

Which of the following is a requirement in order to implement the principle of least privilege?

Options:

Mandatory Access Control (MAC)

Data normalization

Data classification

Discretionary Access Control (DAC)

Viewing page 3 out of 3 pages

Viewing questions 21-30 out of questions

Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the GIAC Cyber Security GCCC Questions and answers with ExamsMirror

Exam GCCC Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

TOP CODES