Question 1

Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?

Options :

A : The loghost is missing logs from 3 servers in the inventory

B : The loghost is receiving logs from hosts with different timezone values

C : The loghost time is out-of-sync with an external host

D : The loghost is receiving out-of-sync logs from undocumented servers

Answer: D

Question 2

Which of the following is a reliable way to test backed up data?

Options :

A : Verify the file size of the backup

B : Confirm the backup service is running at the proper time

C : Compare data hashes of backed up data to original systems

D : Restore the data to a system

Answer: D

Question 3

An organization has implemented a policy to detect and remove malicious software from its network. Which of the following actions is focused on correcting rather than preventing attack?

Options :

A : Configuring a firewall to only allow communication to whitelisted hosts and ports

B : Using Network access control to disable communication by hosts with viruses

C : Disabling autorun features on all workstations on the network

D : Training users to recognize potential phishing attempts

Answer: B

Question 4

Executive management approved the storage of sensitive data on smartphones and tablets as long as they were encrypted. Later a vulnerability was announced at an information security conference that allowed attackers to bypass the device's authentication process, making the data accessible. The smartphone manufacturer said it would take six months for the vulnerability to be fixed and distributed through the cellular carriers. Four months after the vulnerability was announced, an employee lost his tablet and the sensitive information became public.

What was the failure that led to the information being lost?

Options :

A : There was no risk acceptance review after the risk changed

B : The employees failed to maintain their devices at the most current software version

C : Vulnerability scans were not done to identify the devices that we at risk

D : Management had not insured against the possibility of the information being lost

Answer: A

Question 5

An organization is implementing a control within the Application Software Security CIS Control. How can they best protect against injection attacks against their custom web application and database applications?

Options :

A : Ensure the web application server logs are going to a central log host

B : Filter input to only allow safe characters and strings

C : Configure the web server to use Unicode characters only

D : Check user input against a list of reserved database terms

Answer: B

Smartly Prepare Exam with Free Online GCCC Practice Test

Buying Options: