GIAC GCCC Exam - Topic 2 Question 77 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 77
Topic #: 2

After installing a software package on several workstations, an administrator discovered the software opened network port TCP 23456 on each workstation. The port is part of a software management function that is not needed on corporate workstations. Which actions would best protect the computers with the software package installed?

ADocument the port number and request approval from a change control group

BRedirect traffic to and from the software management port to a non-default port

CBlock TCP 23456 at the network perimeter firewall

DDetermine which service controls the software management function and opens the port, and disable it

Show Suggested Answer

Suggested Answer: D

by Kiley at Nov 21, 2025, 05:44 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marya

2 months ago

I feel like understanding the service first is crucial before taking action.

upvoted 0 times

...

Shannan

2 months ago

Redirecting traffic could cause issues later. Better to block it.

upvoted 0 times

...

Justine

2 months ago

But we should also document it for future reference.

upvoted 0 times

...

Nickolas

2 months ago

Agreed, it stops unwanted access right away.

upvoted 0 times

...

Mitsue

2 months ago

I think blocking TCP 23456 at the firewall is the best move.

upvoted 0 times

...

Myong

3 months ago

Disabling the service is the best option here.

upvoted 0 times

...

Paulina

3 months ago

Documenting and getting approval seems unnecessary.

upvoted 0 times

...

Dominga

3 months ago

Surprised they didn't check for open ports before!

upvoted 0 times

...

Melissa

4 months ago

I think redirecting traffic is a bad idea. Just block it.

upvoted 0 times

...

Francine

4 months ago

Hmm, I'm not sure. Maybe we should just uninstall the whole package instead?

upvoted 0 times

...

Julianna

4 months ago

I'd go with B. Redirect the traffic to a different port, that way the software still works.

upvoted 0 times

...

Garry

4 months ago

C is the easiest solution. Just block the port at the firewall and be done with it.

upvoted 0 times

...

Nida

4 months ago

Redirecting traffic to a non-default port seems risky. I don’t recall if that would actually secure the workstations effectively.

upvoted 0 times

...

Roosevelt

4 months ago

Disabling the service that opens the port sounds like a good idea, but what if that service is needed for something else? I’m a bit uncertain about that.

upvoted 0 times

...

Antonette

5 months ago

I remember a similar question where we had to assess risks related to open ports. I feel like documenting and getting approval is important, but it might take too long.

upvoted 0 times

...

Deja

5 months ago

Hmm, I'm not sure which option is best here. I'd probably start by documenting the port and getting approval, just to cover my bases. Then I'd look into disabling the service or redirecting the port, depending on how critical that software management function is. Gotta be careful not to break anything, you know?

upvoted 0 times

...

Tatum

5 months ago

This seems pretty straightforward to me. The port is open for a software management function that we don't need, so I'd go with option D and disable that service. That way we can get rid of the security risk without having to mess with the firewall or change control process.

upvoted 0 times

...

Kerry

5 months ago

I'm a little confused here. Is the software management function something we actually need, or is it just unnecessary bloat? If it's not needed, then disabling it completely seems like the cleanest solution. But if it's important, then redirecting the port might be better than just blocking it.

upvoted 0 times

...

Iola

5 months ago

Blocking TCP 23456 at the firewall is a must!

upvoted 0 times

...

Ming

5 months ago

Option D is the way to go. Disable that service and the port will be closed.

upvoted 0 times

...

Cory

6 months ago

I think blocking TCP 23456 at the network perimeter firewall is a solid choice, but I'm not entirely sure if that alone would be enough.

upvoted 0 times

...

Yan

6 months ago

Haha, I bet the developer who added that port was just showing off their coding skills.

upvoted 0 times

...

Venita

6 months ago

Disabling the service sounds good too, less risk overall.

upvoted 0 times

...

Tammy

6 months ago

Okay, so we need to protect the workstations without disrupting the software. I think option C, blocking the port at the firewall, is the safest bet. That way we can isolate the issue without having to dig too deep into the software itself.

upvoted 0 times

...

Esteban

6 months ago

Hmm, this seems like a tricky one. I'd probably start by trying to understand the software management function and why that port is being opened. Disabling it might be the best long-term solution, but I'd want to make sure that doesn't break anything else.

upvoted 0 times