GIAC Exam GCCC Topic 7 Question 44 Discussion

Actual exam question for GIAC's GIAC Critical Controls Certification exam

Question #: 44
Topic #: 7

[All GIAC Critical Controls Certification Questions]

Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?

AThe loghost is missing logs from 3 servers in the inventory

BThe loghost is receiving logs from hosts with different timezone values

CThe loghost time is out-of-sync with an external host

DThe loghost is receiving out-of-sync logs from undocumented servers

Show Suggested Answer

Suggested Answer: D

by Malinda at Apr 14, 2024, 02:59 AM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tonja

14 hours ago

You know, I'm just glad I don't have to deal with this kind of logging nightmare at my job. Can you imagine the headache?

upvoted 0 times

...

Brande

3 days ago

Ooh, good point. And option B with different timezone values could be a failure in both log management and asset inventory controls.

upvoted 0 times

...

Lillian

4 days ago

Hmm, I'm not so sure. Option C with the loghost being out-of-sync with an external host could also be a failure in multiple controls, like time synchronization and log management.

upvoted 0 times

...

Emmett

5 days ago

I'm leaning towards option D. Having undocumented servers sending out-of-sync logs sounds like a pretty major problem that would likely impact multiple controls.

upvoted 0 times

...

Luisa

7 days ago

Yeah, it's not straightforward. We'll need to really think through each option and how it relates to the CIS Controls.

upvoted 0 times

...

Willard

8 days ago

This is a tricky question. I'm not entirely sure which scenario indicates a failure in more than one CIS Control, but I'll give it my best shot.

upvoted 0 times

...