GAQM CCCP-001 Exam - Topic 1 Question 29 Discussion

Actual exam question for GAQM's CCCP-001 exam

Question #: 29
Topic #: 1

A security administrator is being hired to perform a penetration test of a third-party cloud provider as part of an annual security audit. Which of the following is the FIRST step that must be performed?

AAttempt known exploits

BScan for vulnerabilities

CResearch publicized incidents

DGet written permission

Show Suggested Answer

Suggested Answer: D

by Bulah at May 08, 2022, 12:20 AM

Limited Time Offer

25%

Off

Get Premium CCCP-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Glory

4 months ago

Really? I didn't think that was the first thing to do.

upvoted 0 times

...

Jesusa

4 months ago

Yeah, getting permission is a must, no doubt about it!

upvoted 0 times

...

Jarvis

4 months ago

I thought researching incidents was the first step?

upvoted 0 times

...

Justa

4 months ago

Scanning for vulnerabilities should come before anything else.

upvoted 0 times

...

Matthew

5 months ago

You definitely need written permission first!

upvoted 0 times

...

Derrick

5 months ago

I have a feeling that attempting known exploits is too aggressive for the first step. We should probably establish the scope with permission first.

upvoted 0 times

...

Dan

5 months ago

I recall a question similar to this where the answer was about researching incidents. But in this case, I think permission is crucial first.

upvoted 0 times

...

Rene

5 months ago

I'm not entirely sure, but I feel like scanning for vulnerabilities might come first. It seems like a logical starting point.

upvoted 0 times

...

Glory

5 months ago

I think the first step should be getting written permission. I remember that being emphasized in our practice tests.

upvoted 0 times

...

Stephania

5 months ago

Okay, let's see here. I know the basic ones like <, >, =, and !=, but I'm not sure if there are any others I'm forgetting.

upvoted 0 times

...

Glennis

5 months ago

The key here is to methodically work through the information provided and not jump to conclusions. I'll start by verifying the virtual server configuration, then check the firewall rules, and see if I can spot any discrepancies between the internal and external traffic.

upvoted 0 times

...

Audria

5 months ago

Hmm, I'm a bit unsure about this one. I know BGP has a lot of different attributes, but I'm not sure which one would be used to avoid a high-delay link. I'll have to think this through carefully.

upvoted 0 times

...

Joesph

5 months ago

Okay, I think I've got this. For a recurring revenue contract, the ATR would be the total contract value divided by the contract term. So in this case, it would be $10,000 divided by 12 months, which is $833.33.

upvoted 0 times

...

Tegan

5 months ago

I think the rating system needs to be social and relevant to keep users engaged, like what we discussed in class.

upvoted 0 times

...