Discuss GIAC GCCC Exam Topic 1 Question 12

Which of the options below will do the most to reduce an organization's attack surface on the internet?

ADeploy an access control list on the perimeter router and limit inbound ICMP messages to echo requests only

BDeploy antivirus software on internet-facing hosts, and ensure that the signatures are updated regularly

CEnsure that rotation of duties is used with employees in order to compartmentalize the most important tasks

DEnsure only necessary services are running on Internet-facing hosts, and that they are hardened according to best practices

Suggested Answer: D

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Josefa 11 months ago

Surprised that people overlook the importance of service hardening!

Lashon 11 months ago

Really? I thought antivirus was more crucial than just limiting services.

Tegan 12 months ago

Hardening services is key! Totally agree with D.

Leota 12 months ago

I think A is also important, but not as effective as D.

Lindsey 12 months ago

Option D is definitely the best choice!

Tien 1 year ago

I keep second-guessing myself, but I thought antivirus was more about detection than reducing the attack surface. Is B really effective for that?

Elmer 1 year ago

I'm not entirely sure, but I feel like option A could help too, especially with controlling ICMP traffic.

Gaynell 1 year ago

I remember we discussed how limiting services can really help reduce the attack surface. I think option D might be the best choice.

Tamra 1 year ago

I practiced a question similar to this, and I think hardening services is crucial. D seems to align with that concept.

Candida 1 year ago

I'm a bit confused on the details here. I'll need to review the Citrix documentation to make sure I fully grasp the behavior in this situation.

Jeannetta 1 year ago

Okay, let me think this through step-by-step. First I'll add up the wages, interest, and business income. Then I'll subtract the rental loss and the deductions. I think that will give me the right AGI.

Oneida 1 year ago

Option D rings a bell too; I remember we practiced that in our lab when discussing DEP settings.

Stefany 1 year ago

Hmm, I'm a bit unsure about this one. I know accounts receivable and accounts payable are related to working capital, but I'm not sure which one would be considered a spontaneous source of financing.

Sabine 1 year ago

I remember provider profiling being used to improve care quality, so A seems true to me.

GIAC GCCC Exam - Topic 1 Question 12 Discussion