Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCCC Exam - Topic 2 Question 29 Discussion

Which approach is recommended by the CIS Controls for performing penetration tests?
C) Complete intrusive tests on test systems
A) Document a single vulnerability per system
B) Utilize a single attack vector at a time
D) Execute all tests during network maintenance windows

GIAC GCCC Exam - Topic 2 Question 29 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 29
Topic #: 2
[All GCCC Questions]

Which approach is recommended by the CIS Controls for performing penetration tests?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Leota at May 08, 2022, 01:43 AM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Brett
9 months ago
I don't know, but A sounds too limiting to me!
upvoted 0 times
...
Taryn
9 months ago
D seems smart too, testing during maintenance makes sense.
upvoted 0 times
...
Loren
10 months ago
Wait, is it really C? I thought they preferred a more cautious approach.
upvoted 0 times
...
Florinda
10 months ago
Totally agree with C! That's the best way to find real issues.
upvoted 0 times
...
Han
10 months ago
I think it's C, right? Intrusive tests are key.
upvoted 0 times
...
Bernardine
10 months ago
I practiced a question similar to this, and I think documenting vulnerabilities is important, but I don't remember it being the main approach recommended by the CIS Controls.
upvoted 0 times
...
Goldie
10 months ago
I feel like option D makes sense since conducting tests during maintenance windows minimizes disruption, but I can't recall if that's explicitly recommended.
upvoted 0 times
...
Ahmad
10 months ago
I remember something about focusing on specific attack vectors, but I'm not sure if that means we should only use one at a time like option B suggests.
upvoted 0 times
...
Augustine
10 months ago
I think the CIS Controls emphasize the importance of testing in a controlled environment, so maybe option C is the right choice?
upvoted 0 times
...
Stephane
10 months ago
Okay, I've got this. The qualitative approach is the clear choice - it has a more straightforward process and is supported by appropriate guidance. I'm confident in this answer.
upvoted 0 times
...
Merlyn
10 months ago
Okay, I think I've got a strategy for this. Enabling parallel jobs could help, but I also wonder if there are ways to cache the packages or optimize the installation process. I'll need to research that further.
upvoted 0 times
...

Save Cancel