Discuss GIAC GCCC Exam Topic 10 Question 14

An auditor is focusing on potential vulnerabilities. Which of the following should cause an alert?

AWorkstation on which a domain admin has never logged in

BWindows host with an uptime of 382 days

CServer that has zero browser plug-ins

DFully patched guest machine that is not in the asset inventory

Suggested Answer: B

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Antonio 11 months ago

I disagree, uptime of 382 days can be normal for some servers.

Eugene 11 months ago

Wait, a server with zero plug-ins? That’s weird.

Craig 12 months ago

C seems odd too, but not as alarming as D.

Markus 12 months ago

I think D is the biggest red flag here.

Titus 12 months ago

A is definitely suspicious!

Carman 1 year ago

I feel like the server with zero browser plug-ins might be okay, but it could also indicate a lack of necessary updates. Not sure if it should trigger an alert though.

Adell 1 year ago

The uptime of 382 days seems suspicious, but I can't recall if that's a definite cause for concern. Maybe it just means it's stable?

Mozell 1 year ago

I think the fully patched guest machine not in the asset inventory should definitely raise an alert. It seems like a classic vulnerability scenario we practiced.

Douglass 1 year ago

I remember discussing how a workstation without a domain admin login could be a red flag, but I'm not entirely sure if it's the most critical issue.

Sherron 1 year ago

Hmm, I'm a bit unsure on this one. Is it something to do with the message not being available or accessible? Or maybe the integrity of the information is in question?

France 1 year ago

Okay, this looks like a straightforward PivotTable question. I think I can handle this.

Sharita 1 year ago

I remember practicing something similar for the exam, and it feels like option A could be the right answer since it's checking out a commit directly.

Rebbecca 1 year ago

Okay, let me see here. I know read only=yes makes the share read-only, so the equivalent parameter would be one that also restricts write access. I'm leaning towards C - writeable=no, but I'll double-check the others just to be sure.

GIAC GCCC Exam - Topic 10 Question 14 Discussion