GIAC GCCC Exam - Topic 6 Question 2 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 2
Topic #: 6

IDS alerts at Service Industries are received by email. A typical day process over 300 emails with fewer than 50 requiring action. A recent attack was successful and went unnoticed due to the number of generated alerts. What should be done to prevent this from recurring?

ATune the IDS rules to decrease false positives.

BIncrease the number of staff responsible for processing IDS alerts.

CChange the alert method from email to text message.

DConfigure the IDS alerts to only alert on high priority systems.

Show Suggested Answer

Suggested Answer: A

by Janine at May 03, 2022, 09:08 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Micah

7 months ago

300 emails a day? That's way too many to sift through!

upvoted 0 times

...

Sylvia

7 months ago

Definitely need to focus on high priority systems for alerts.

upvoted 0 times

...

Roxanne

7 months ago

Wait, changing to text messages? Is that really a good idea?

upvoted 0 times

...

Vannessa

8 months ago

I disagree, we need more staff to handle the alerts.

upvoted 0 times

...

Virgina

8 months ago

Sounds like tuning the IDS rules is a must!

upvoted 0 times

...

Teri

8 months ago

I think configuring alerts for only high priority systems could be effective. It might help us catch the critical threats without getting overwhelmed by noise.

upvoted 0 times

...

Lonna

8 months ago

Changing the alert method to text messages sounds interesting, but I wonder if that would really help with the volume of alerts we get.

upvoted 0 times

...

Maynard

8 months ago

I'm not entirely sure, but increasing staff might help manage the volume of alerts. However, it could be costly and might not solve the root issue.

upvoted 0 times

...

Mitzie

8 months ago

I remember we discussed tuning IDS rules to reduce false positives in class. It seems like a good way to focus on the alerts that really matter.

upvoted 0 times

...

Jamie

8 months ago

I've got this! The key is to use the formula for direct labour efficiency variance and plug in the numbers.

upvoted 0 times

...

Titus

8 months ago

Strategic dashboards seem like the most logical choice here. Senior management typically uses high-level, strategic tools to oversee the organization's performance and progress towards its objectives.

upvoted 0 times

...

Lynelle

8 months ago

Hmm, I'm a bit confused by the details here. I need to make sure I understand the relationship between the hotel chain and the travel agency before I can determine their roles. Let me re-read this a few times.

upvoted 0 times

...