[Mar-2024] The Best Cyber Security GCCC Professional Exam Questions [Q19-Q34]

NEW QUESTION 19
Which of the options below will do the most to reduce an organization’s attack surface on the internet?

NEW QUESTION 20
Which of the following is necessary for implementing and automating the Continuous Vulnerability Assessment and Remediation CIS Control?

NEW QUESTION 21
Janice is auditing the perimeter of the network at Sugar Water InC. According to documentation, external SMTP traffic is only allowed to and from 10.10.10.25. Which of the following actions would demonstrate the rules are configured incorrectly?

NEW QUESTION 22
What type of Unified Modelling Language (UML) diagram is used to show dependencies between logical groupings in a system?

NEW QUESTION 23
A breach was discovered after several customers reported fraudulent charges on their accounts. The attacker had exported customer logins and cracked passwords that were hashed but not salted. Customers were made to reset their passwords.
Shortly after the systems were cleaned and restored to service, it was discovered that a compromised system administrator’s account was being used to give the attacker continued access to the network. Which CIS Control failed in the continued access to the network?

NEW QUESTION 24
Which activity increases the risk of a malware infection?

NEW QUESTION 25
A global corporation has major data centers in Seattle, New York, London and Tokyo. Which of the following is the correct approach from an intrusion detection and event correlation perspective?

NEW QUESTION 26
As part of an effort to implement a control on E-mail and Web Protections, an organization is monitoring their webserver traffic. Which event should they receive an alert on?

NEW QUESTION 27
Which of the following is a benefit of stress-testing a network?

NEW QUESTION 28
The settings in the screenshot would be configured as part of which CIS Control?

NEW QUESTION 29
Dragonfly Industries requires firewall rules to go through a change management system before they are configured. Review the change management log. Which of the following lines in your firewall ruleset has expired and should be removed from the configuration?

NEW QUESTION 30
Which of the following is a reliable way to test backed up data?

NEW QUESTION 31
Kenya is a system administrator for SANS. Per the recommendations of the CIS Controls she has a dedicated host (kenya- adminbox / 10.10.10.10) for any administrative tasks. She logs into the dedicated host with her domain admin credentials. Which of the following connections should not exist from kenya-adminbox?

NEW QUESTION 32
After installing a software package on several workstations, an administrator discovered the software opened network port TCP 23456 on each workstation. The port is part of a software management function that is not needed on corporate workstations. Which actions would best protect the computers with the software package installed?

NEW QUESTION 33
Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?

NEW QUESTION 34
Which of the following is a responsibility of a change management board?