GCCC GIAC Critical Controls Certification (GCCC) Questions and Answers

A network vulnerability scan using aggressive scanning

A source code scan

A port scan using banner grabbing

A web application/database scan

A vulnerability scan using valid credentials

The loghost is missing logs from 3 servers in the inventory

The loghost is receiving logs from hosts with different timezone values

The loghost time is out-of-sync with an external host

The loghost is receiving out-of-sync logs from undocumented servers

Mimikatz

OpenVAS

Metasploit

Enforce company configuration standards for personal mobile devices

Configure Active Directory to push an updated inventory to the NAC daily

Disable the web portal device registration service

Change the wireless password following the NAC implementation

Reports can be sent to the CIO for performance benchmarks

Results can be provided to network engineers as actionable feedback

Scanners can correct network configurations issues

Results can be included in audit evidence failures

A new connection request from the Internet is sent to a host on the company ’s internal net work

A packet originating from the company’s DMZ is sent to a host on the company’s internal network

A new connection request from the internet is sent to the company’s DNS server

A packet originating from the company’s internal network is sent to the company’s DNS server

Host-based firewall sends alerts when packets are sent to a closed port

Network Intrusion Prevention sends alerts when RST packets are received

Network Intrusion Detection devices sends alerts when signatures are updated

Host-based anti-virus sends alerts to a central security console

Enable encryption if it ’s not enabled by default

Disable software-level encryption to increase speed of transfer

Develop a unique encryption scheme

Keep debugging code in production web applications for quick troubleshooting

Limit access to the web application production environment to just the developers

Run a dedicated vulnerability scanner against backend databases

Display system error messages for only non-kernel related events

Enabling best practices for the protection of their software licenses

Providing their employees, a secure method of connecting to the corporate network C. Controlling unauthorized access to sensitive information

Applying the principle of defense in depth to their mobile devices