Free GIAC GCCC Exam Dumps Questions & Answers

DHCP logging output in the screenshot would be used for which of the following?

• A.  Detecting malicious activity by compromised or unauthorized devices on the network.
• B.  Providing ping sweep results to identify live network hosts for vulnerability scanning.
• C.  Enforcing port-based network access control to prevent unauthorized devices on the network.
• D.  Identifying new connections to maintain an up-to-date inventory of devices on the network.

An Internet retailer's database was recently exploited by a foreign criminal organization via a remote attack.
The initial exploit resulted in immediate root-level access. What could have been done to prevent this level of access being given to the intruder upon successful exploitation?

• A.  Install updated anti-virus software
• B.  Configure the DMZ firewall to block unnecessary service
• C.  Configure the database to run with lower privileges
• D.  Install host integrity monitoring software

Which approach is recommended by the CIS Controls for performing penetration tests?

• A.  Execute all tests during network maintenance windows
• B.  Document a single vulnerability per system
• C.  Utilize a single attack vector at a time
• D.  Complete intrusive tests on test systems

A need has been identified to organize and control access to different classifications of information stored on a fileserver. Which of the following approaches will meet this need?

• A.  Organize files according to the user that created them and allow the user to determine permissions
• B.  Set user roles by job or position, and create permission by role for each file
• C.  Divide the documents into confidential, internal, and public folders, and ser permissions on each folder
• D.  Divide the documents by department and set permissions on each departmental folder

Allied services have recently purchased NAC devices to detect and prevent non-company owned devices from attaching to their internal wired and wireless network. Corporate devices will be automatically added to the approved device list by querying Active Directory for domain devices. Non-approved devices will be placed on a protected VLAN with no network access. The NAC also offers a web portal that can be integrated with Active Directory to allow for employee device registration which will not be utilized in this deployment.
Which of the following recommendations would make NAC installation more secure?

• A.  Configure Active Directory to push an updated inventory to the NAC daily
• B.  Disable the web portal device registration service
• C.  Change the wireless password following the NAC implementation
• D.  Enforce company configuration standards for personal mobile devices