GIAC Critical Controls Certification GCCC Exam Questions

Preparing for the GCCC exam is simple with Certs Vault. We offer easy-to-understand study materials that help you learn the most important exam topics. You can study using our PDF questions, practice online with a real exam-style test, or use the desktop practice software. Choose the study method that works best for you and prepare at your own pace.

At Certs Vault, we keep our GCCC practice questions up to date. Whenever the exam syllabus or objectives change, we update our study materials so you always learn the latest topics. This helps you save time, avoid outdated content, and feel more confident when you take your exam.

Question #1 (Topic: Demo Questions)

What is the relationship between a service and its associated port?

A service closes a port after a period of inactivity

A service relies on the port to select the protocol

A service sets limits on the volume of traffic sent through the port

A service opens the port and listens for network traffic

Correct Answer: D

Question #2 (Topic: Demo Questions)

A global corporation has major data centers in Seattle, New York, London and Tokyo. Which of the following is the correct approach from an intrusion

detection and event correlation perspective?

Configure all data center systems to use local time

Configure all data center systems to use GMT time

Configure all systems to use their default time settings

Synchronize between Seattle and New York, and use local time for London and Tokyo

Correct Answer: A

Question #3 (Topic: Demo Questions)

Which of the following items would be used reactively for incident response?

A schedule for creating and storing backup

A phone tree used to contact necessary personnel

A script used to verify patches are installed on systems

An IPS rule that prevents web access from international locations

Correct Answer: B

Question #4 (Topic: Demo Questions)

Allied services have recently purchased NAC devices to detect and prevent non-company owned devices from attaching to their internal wired and wireless network. Corporate devices will be automatically added to the approved device list by querying Active Directory for domain devices. Non-approved devices will be placed on a protected VLAN with no network access. The NAC also offers a web portal that can be integrated with Active Directory to allow for employee device registration which will not be utilized in this deployment. Which of the following recommendations would make NAC installation more secure?

Enforce company configuration standards for personal mobile devices

Configure Active Directory to push an updated inventory to the NAC daily

Disable the web portal device registration service

Change the wireless password following the NAC implementation

Correct Answer: C

Question #5 (Topic: Demo Questions)

When evaluating the Wireless Access Control CIS Control, which of the following systems needs to be tested?

Log management system

802.1x authentication systems

Data classification and access baselines

PII data scanner

Correct Answer: B

Page: 1 / 1