Online Access Free GCCC Exam Questions

Which of the following will decrease the likelihood of eavesdropping on a wireless network?

• A.Putting the wireless network on a separate VLAN
• B.Using Wired Equivalent Protocol (WEP)
• C.Broadcasting in the 5Ghz frequency
• D.Using EAP/TLS authentication and WPA2 with AES encryption

An organization has implemented a control for Controlled Use of Administrative Privileges. They are collecting audit data for each login, logout, and location for the root account of their MySQL server, but they are unable to attribute each of these logins to a specific user. What action can they take to rectify this?

• A.Force the root account to only be accessible from the system console.
• B.Turn on SELinux and user process accounting for the MySQL server.
• C.Blacklist client applications from being run in privileged mode.
• D.Force user accounts to use 'sudo' f or privileged use.

An organization has created a policy that allows software from an approved list of applications to be installed on workstations. Programs not on the list should not be installed. How can the organization best monitor compliance with the policy?

• A.Performing regular port scans of workstations on the network
• B.Creating an IDS signature to alert based on unknown "User-Agent " strings
• C.Auditing Active Directory and alerting when new accounts are created
• D.Comparing system snapshots and alerting when changes are made

Dragonfly Industries requires firewall rules to go through a change management system before they are configured. Review the change management log. Which of the following lines in your firewall ruleset has expired and should be removed from the configuration?

• A.access-list inbound permit tcp host 8.8.207.97 host 10.10.12.100 eq ssh
• B.access-list outbound permit tcp host 10.1.1.7 any eq smtp
• C.access-list inbound permit tcp 8.8.0.0 0.0.0.255 10.10.12.252 eq 8080
• D.access-list outbound deny tcp any host 74.125.228.2 eq www

Which of the options below will do the most to reduce an organization's attack surface on the internet?

• A.Deploy an access control list on the perimeter router and limit inbound ICMP messages to echo requests only
• B.Ensure only necessary services are running on Internet-facing hosts, and that they are hardened according to best practices
• C.Ensure that rotation of duties is used with employees in order to compartmentalize the most important tasks
• D.Deploy antivirus software on internet-facing hosts, and ensure that the signatures are updated regularly