Online Access Free GCIL Exam Questions

What is the primary difference between vulnerability scanning and penetration testing?
Response:

• A.Vulnerability scanning is performed after penetration testing
• B.Penetration testing is automated, while vulnerability scanning is manual
• C.Vulnerability scanning actively exploits systems, while penetration testing only identifies weaknesses
• D.Penetration testing simulates real-world attacks, while vulnerability scanning identifies potential weaknesses without exploitation

Which incident tracking features help improve response efficiency?
(Select two.)
Response:

• A.Real-time status updates for response teams
• B.Automatic ticket creation for new incidents
• C.Hiding incident records from auditors
• D.Avoiding documentation of past security breaches

Which attack type specifically targets cloud identity and access management (IAM) weaknesses?
Response:

• A.Distributed Denial-of-Service (DDoS)
• B.Container escape
• C.Credential stuffing
• D.Watering hole attack

Which action should be taken during the incident closure phase?
Response:

• A.Deleting all security logs to prevent future investigations
• B.Leaving security vulnerabilities unpatched
• C.Notifying regulatory authorities if necessary
• D.Ignoring affected users and focusing only on technical fixes

Your company discovers that a trusted software provider was compromised, and its recent update included malware. What should be your first step?
Response:

• A.Ignore the threat since it came from a trusted vendor
• B.Pay ransom demands to the attackers
• C.Isolate affected systems and block the software's network access
• D.Publicly accuse the vendor without investigating