Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

GIAC GCCC Exam - Topic 5 Question 25 Discussion

An organization has failed a test for compliance with a policy of continual detection and removal of malicious software on its network. Which of the following errors is the root cause?
C) The intrusion prevention system failed to update to the newest signature list
A) A host ran malicious software that exploited a vulnerability for which there was no patch
B) The security console alerted when a host anti-virus ran whitelisted software
D) A newly discovered vulnerability was not detected by the intrusion detection system

GIAC GCCC Exam - Topic 5 Question 25 Discussion

Actual exam question for GIAC's GCCC exam
Question #: 25
Topic #: 5
[All GCCC Questions]

An organization has failed a test for compliance with a policy of continual detection and removal of malicious software on its network. Which of the following errors is the root cause?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Lorrine at May 05, 2022, 07:36 AM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Sue
9 months ago
B is just a false alarm, not a root cause.
upvoted 0 times
...
Raymon
9 months ago
Wait, how can they not detect a new vulnerability? Sounds fishy.
upvoted 0 times
...
Hubert
10 months ago
D is a huge oversight, can't believe they missed that.
upvoted 0 times
...
Apolonia
10 months ago
I disagree, A is the real issue. No patch means big trouble!
upvoted 0 times
...
Sage
10 months ago
C seems like the obvious choice here.
upvoted 0 times
...
Craig
10 months ago
I practiced a similar question where the failure was due to detection issues, so I'm leaning towards D.
upvoted 0 times
...
Lonny
10 months ago
I'm not entirely sure, but I think A could be a possibility since unpatched vulnerabilities are a big issue.
upvoted 0 times
...
Val
10 months ago
I remember something about how outdated signatures can lead to missed threats, so C might be the right choice.
upvoted 0 times
...
Thaddeus
10 months ago
B seems off to me; whitelisted software shouldn't trigger alerts, but I can't recall if that really affects compliance.
upvoted 0 times
...
Cheryl
10 months ago
This seems like a straightforward question based on the details provided in the scenario. I'd focus on the key issues Roberta identified, like lack of access controls and outdated data, to determine the most likely cause of the breach.
upvoted 0 times
...
Ma
10 months ago
This seems like a straightforward question on link encryption. I'll carefully read through the options and try to identify the false statement.
upvoted 0 times
...
Denise
10 months ago
I remember that using S3 to trigger Lambda is a common pattern, but would going with option B really ensure high availability as required?
upvoted 0 times
...

Save Cancel