GIAC GCCC dumps - 100% Pass Guarantee!

How often should the security awareness program be communicated to employees?

A. Continuously

B. Annually

C. Monthly

D. At orientation and review times

An auditor is validating the policies and procedures for an organization with respect to a control for Data Recovery. The organization's control states they will completely back up critical servers weekly, with incremental backups every four hours. Which action will best verify success of the policy?

A. Verify that the backup media cannot be read without the encryption key

B. Check the backup logs from the critical servers and verify there are no errors

C. Select a random file from a critical server and verify it is present in a backup set

D. Restore the critical server data from backup and see if data is missing

An organization has failed a test for compliance with a policy of continual detection and removal of malicious software on its network. Which of the following errors is the root cause?

A. A host ran malicious software that exploited a vulnerability for which there was no patch

B. The security console alerted when a host anti-virus ran whitelisted software

C. The intrusion prevention system failed to update to the newest signature list

D. A newly discovered vulnerability was not detected by the intrusion detection system

An organization has implemented a policy to continually detect and remove malware from its network. Which of the following is a detective control needed for this?

A. Host-based firewall sends alerts when packets are sent to a closed port

B. Network Intrusion Prevention sends alerts when RST packets are received

C. Network Intrusion Detection devices sends alerts when signatures are updated

D. Host-based anti-virus sends alerts to a central security console

Janice is auditing the perimeter of the network at Sugar Water InC. According to documentation, external SMTP traffic is only allowed to and from 10.10.10.25. Which of the following actions would demonstrate the rules are configured incorrectly?

A. Receive spam from a known bad domain

B. Receive mail at Sugar Water Inc. account using Outlook as a mail client

C. Successfully deliver mail from another host inside the network directly to an external contact

D. Successfully deliver mail from web client using another host inside the network to an external contact.