MENU
A security incident investigation identified the following modified version of a legitimate system file on a compromised client:
C:\Windows\System32\winxml.dll Addition Jan. 16, 2014 4:53:11 PM
The infection vector was determined to be a vulnerable browser plug-in installed by the user. Which of the organization's CIS Controls failed?
Suggested Answer: B
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
3 comments · newest first
PE
Percy
2 days ago
I feel like it could also connect to Maintenance, Monitoring, and Analysis of Audit Logs, but I’m not confident about that one.
YO
Yoko
8 days ago
I’m not entirely sure, but I remember a practice question about software inventory that seemed similar. Could it be Inventory and Control of Software Assets?
DA
Dannette
13 days ago
I think this might relate to Application Software Security since the browser plug-in was vulnerable.