Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCCC Exam - Topic 9 Question 72 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 72
Topic #: 9
[All GCCC Questions]

Which of the following statements is appropriate in an incident response report?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Denise at Jun 16, 2025, 05:29 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Dorcas
5 months ago
C sounds a bit speculative, we need more evidence.
upvoted 0 times
...
Rosendo
5 months ago
B is the only one with a specific timestamp, makes it reliable.
upvoted 0 times
...
Mozelle
6 months ago
A storm could definitely cause issues, but it's not a solid fact.
upvoted 0 times
...
Jospeh
6 months ago
D seems plausible, but lack of bandwidth? Really?
upvoted 0 times
...
Florencia
6 months ago
Surprised that storm info is even mentioned, feels irrelevant.
upvoted 0 times
...
Valentin
6 months ago
Option C seems a bit uncertain with "may have been able to access," which doesn't sound right for a report. I guess I should stick with option B too.
upvoted 0 times
...
Karan
6 months ago
I think I saw a practice question that emphasized avoiding "may have" statements. So, I'm leaning towards option B again.
upvoted 0 times
...
Matt
7 months ago
I'm not entirely sure, but I feel like mentioning specific times and actions like in option B is crucial for clarity in reports.
upvoted 0 times
...
Whitley
7 months ago
I remember we discussed how incident reports should focus on factual information rather than speculation. I think option B is the most appropriate.
upvoted 0 times
...
Fernanda
7 months ago
Hmm, I'm not too sure about this one. I'll need to review my notes on incident response reporting to make sure I'm choosing the right kind of information to include. Gotta be careful with these tricky exam questions.
upvoted 0 times
...
Felice
7 months ago
I've got a good feeling about option C. Mentioning a missing security patch that may have allowed the attacker access seems like the kind of technical detail that would be important to include in an incident response.
upvoted 0 times
...
Audry
8 months ago
I'm a bit confused on this one. The other options seem to mention general events or possibilities, but I'm not sure if those would be the most appropriate for an incident report. I'll need to think this through carefully.
upvoted 0 times
...
Rebbecca
8 months ago
Okay, let's see here. I think option B is the most relevant - it provides a specific detail about a registry entry being modified, which could be important incident information.
upvoted 0 times
...
Joseph
8 months ago
Hmm, this looks like a tricky one. I'll need to carefully consider each option and think about what kind of information would be appropriate in an incident response report.
upvoted 0 times
...
Dominic
11 months ago
Haha, I bet the attacker was a meteorologist trying to cover their tracks with that storm excuse in Option A!
upvoted 0 times
...
Doretha
11 months ago
Definitely Option B. The other options are too vague or speculative. We need to stick to the facts in the report.
upvoted 0 times
Amie
11 months ago
Yes, we should avoid speculation and stick to the concrete details in the report.
upvoted 0 times
...
Paris
11 months ago
I agree, Option B is the most specific and factual statement.
upvoted 0 times
...
...
Lauran
11 months ago
I'm not sure, but I think statement A) about the storm causing a power surge could also be relevant in an incident response report.
upvoted 0 times
...
Jacquline
11 months ago
I agree with Michal. Option B gives the necessary technical details that an incident response report should include.
upvoted 0 times
...
Tess
11 months ago
I agree with Charlene, statement C makes sense because missing a critical security update could definitely lead to a security breach.
upvoted 0 times
...
Michal
11 months ago
Option B is the most appropriate. Providing specific details about the incident, like the registry entry modification, is crucial for an incident response report.
upvoted 0 times
Coral
10 months ago
I think option D is important too, highlighting a possible reason for the backup failure can help in addressing the issue.
upvoted 0 times
...
Jacob
11 months ago
Option C is also relevant, identifying a potential vulnerability like missing KB2965111 is crucial for prevention.
upvoted 0 times
...
Alyce
11 months ago
I agree, option B provides a specific detail that can help in understanding the incident better.
upvoted 0 times
...
Arminda
11 months ago
I think option A is also important, mentioning a possible cause like a power surge can provide context.
upvoted 0 times
...
...
Charlene
12 months ago
I think the correct statement is C) The attacker may have been able to access the systems due to missing KB2965111.
upvoted 0 times
...

Save Cancel